HIPAA & Medical Records
Remove PHI — and prove it’s gone
Detect Protected Health Information across a document, review every finding yourself, and release a file that has been re-scanned to confirm no PHI was left behind.
RedactWorks detects PHI — names, dates, record numbers, and the identifiers that point back to a patient — highlights every item for your approval, permanently removes what you approve, then re-scans the finished file and blocks delivery if any approved item survives. A claim of removal isn’t the same as a check of the output.
Start with 3 documents free, no card. Professionals on recurring work use the $14.99/month plan (150 documents); a $1.99 3-pack covers the occasional job.
See it on a sample — no signup, no upload
The AI has already scanned this synthetic record. Every free tool makes you the detector; here the finding is done for you, and your job is the decision on each item.
Subject Jordan A. Pemberton (ID 4415-882) was interviewed on March 14 regarding the request. Contact Maria Pemberton was reached at (555) 014-2291.
Identity verified against SSN 123-45-6789. A follow-up was sent to m.pemberton@example.com. No further action required.
The AI found 6 items — the decision is yours. Click any highlight to keep it visible; nothing is redacted until you approve.
Verified. 6 items permanently removed — the text is deleted, not covered — hidden data stripped, and the finished file re-scanned to prove it. Kept visible: none.
Now try your own fileSynthetic sample — every name and number is invented. The AI can highlight, but it can’t redact: only your approval applies a black box.
Why a black box isn’t a safeguard
A rectangle drawn over PHI only covers it — the underlying characters remain in the file and can be revealed with a copy-paste. Metadata, annotations, and embedded content survive page-level edits too. An accidental disclosure of PHI is exactly the outcome the workflow is meant to prevent, and a covered box is a disclosure waiting to be copied out.
A verify pass built for accidental-disclosure risk
The verify step re-scans every redacted file and quarantines it if PHI is still present, so a miss is caught before delivery rather than after. To be clear about what software can and can’t do: no tool can guarantee a perfect outcome, and compliance is something your organization achieves through its process, not a checkbox a vendor can claim for you. What RedactWorks does is keep a person in the loop and refuse to deliver a file that fails its own re-scan — a defensible workflow, not a magic button.
How verified redaction works
- Detect. Upload the file and detection runs automatically — names, SSNs, account numbers, addresses, dates, and the dates and record numbers that re-identify a patient in context. High-risk categories (SSN, financial, medical) stay locked on.
- Review and approve. Every finding is a checkbox over still-visible text. Uncheck what should stay, add anything missed. Nothing is removed until you approve.
- Redact and verify. Approved text is permanently removed and hidden data stripped — then the finished file is re-scanned, and delivery is blocked if any approved item survives.
Start with 3 documents free, no card. Professionals on recurring work use the $14.99/month plan (150 documents); a $1.99 3-pack covers the occasional job.
Common questions
Is RedactWorks HIPAA compliant?
Compliance is something your organization achieves through its process, not a label a vendor can claim for you. RedactWorks is built to support a HIPAA-defensible workflow: it requires human approval before redacting, permanently removes the text, and re-scans every output, blocking delivery if PHI remains.
Does it permanently remove PHI or just cover it?
It permanently removes it. Approved content has its underlying text layer deleted and metadata stripped, so there is no hidden layer to copy-paste back out.
What does it cost?
Three documents are free with no card. After that it is $14.99/month for 150 documents, or a $1.99 pack of three. Each document can run up to 50 pages.