Study privacy and data preparation
De-identification is not automatic assurance
Use only permitted de-identified data for initial demonstrations. Metadata stripping alone does not establish HIPAA Safe Harbor compliance or prove that no patient information leaves the hospital. Site staff must inspect every intended upload, including pixels and free-text fields.
Browser upload and on-site delivery
Supported DICOM uploads are parsed locally and rendered into images; supported formats and frame handling require testing. The on-site connector handles DICOM rendering and metadata preparation before frame delivery. Neither path guarantees removal of identifiers burned into images.
Check every part of the study
Review patient names, MRNs, birth dates, accession numbers, dates, text overlays, filenames, reference IDs, and technician notes. Keep any re-identification mapping under approved hospital control. The optional de-identified upload setting is not a universal check for single images, bulk uploads, or all study fields.
What can be transmitted
Rendered images, reference fields, entered metadata, notes, and review records can reach the hosted workspace. If an identifier remains in any of them, it can be transmitted. A local reference ID should not contain an MRN or other direct identifier.
Routine uploads exclude experimental AI
Routine uploads and connector deliveries do not trigger hosted experimental AI. Separate administrator research benchmarks can send permitted images through hosted AI. AI remains in development and excluded from the workflow-only offer. Verify all data recipients and the approved data flow before a hospital patient-data pilot.
Identifiable data requires more than a template
Do not transmit identifiable patient data until hospital privacy, security, legal, and clinical leads approve the scope, required agreements are executed, and all provider coverage is verified. No agreement turnaround or safe-upload guarantee is promised.
Site acceptance before routine use
Verify the actual image and metadata delivery, access controls, retention, deletion, and incident handling. A sampled clip does not prove a complete exam or full heartbeat. Continue using the hospital’s established clinical workflow during evaluation.