Claims work needs access to sensitive information. We keep that access narrow, written down, and under your control. This page explains how.
The rule
No form on this site accepts patient information or medical records. Claims data moves only through your own systems or our separate secure portal, under a signed agreement.
Where data goes
01
We work inside your existing systems wherever possible, with named user accounts that you create, control and can revoke at any time. We ask for the minimum access the work needs — typically claims, remittances and the documentation needed to support an appeal.
02
We avoid copying patient data out of your systems. Where a copy is needed — for example, an appeal file — it is kept in our secure portal, encrypted, for only as long as the agreement allows.
03
Files move through the secure portal, not by email or messaging apps. If your local law restricts transfers across borders, we agree an approach that complies before any data moves.
04
Before we see a single claim — including for the free audit — we sign a data processing agreement. It defines what we process, why, for how long, who can access it, and what happens if something goes wrong.
05
We work with providers in many countries, each with its own health privacy law. We follow the law that applies to your practice. Where it is stricter than our own standard, it wins.
Everyone who works on your claims is named, trained in data protection, and bound by confidentiality terms. Access is removed the day someone leaves the engagement.
If you think data has been handled wrongly, write to [[SECURITY_CONTACT_EMAIL]]. We acknowledge within [[SECURITY_RESPONSE_HOURS]] hours.
Go to the secure portal: [[PORTAL_LINK]]
For existing clients only.
The audit runs under the same rules.