Free tool · no signup · no account

Safe Harbor De-identifier

Paste clinical text. It flags and masks the 18 HIPAA Safe Harbor identifiers before you put anything into an AI tool. Then you read it back as a stranger would, because a regex cannot know that a rare diagnosis in a small town identifies someone.

Nothing leaves your device. This page runs entirely in your browser. There is no server call, no upload, no analytics on this page, and no storage. Every asset it needs, including the fonts - is served from this domain, and the page is delivered with a Content-Security-Policy of connect-src 'none', which makes an outbound request impossible rather than merely absent. You can disconnect from the network and it still works, try it. View source and check. We would rather you did.

This does not make any AI tool HIPAA-compliant, and it does not certify de-identification. It is a first pass that catches the mechanical identifiers. Safe Harbor also requires that you have no actual knowledge the remaining information could identify the person, and a rare presentation plus a small catchment area can identify someone with every field above removed. Read the output back as a stranger would. If someone who knows this patient could recognize them, strip more or don't use the case at all.

And none of this grants permission. Your organization's policy and your vendor's contract decide whether you may use a tool at all.

Want the printable version?

The 18 identifiers and the five-step protocol as a one-page PDF you can pin above your workstation, plus two of the eight EHR phrase templates to try. Free, no purchase.

The printable pocket card version of this checklist is on the free protocols page, together with the 47 documentation failure modes and the six named Attending Standard protocols.

There is deliberately no email box on this page. It would be a form post, and this page promises it makes no call of any kind. The tool stays free and ungated either way.

This is one page of the system

The Attending is a workflow system for the administrative half of medicine, 8 EHR-ready phrase templates, 100 clinical prompts each marked GREEN / AMBER / RED for patient data, seven complete workflows, and the full Safe Harbor protocol. One payment. No subscription.

The 18 identifiers

Detected automaticallyYou must check by hand
Names (title-prefixed), dates, ages over 89, phone, fax, email, SSN, MRN, account and health-plan numbers, license and certificate numbers, vehicle and device serials, URLs, IP addresses, ZIP and street address Biometric identifiers, full-face photographs, employer or facility names not preceded by a title, relationship descriptors, and any other unique characteristic or code, including a rare diagnosis in a small population