Black out patient details before you share records
Share medical records with insurers, lawyers, or researchers while permanently removing details they should not see.
The problem
- Records teams field requests for patient files from insurers, solicitors, and researchers, each needing a different subset with identifiers removed.
- Charts arrive as scanned images, so staff cannot reliably search for every place a name, ID, or address appears before release.
- Manually drawn black boxes can leave the underlying text recoverable, risking accidental disclosure of protected health information.
The workflow
One licensed pipeline chains these steps end to end. Each step is a tool you can try free on the public site.
- 1
Make the chart searchable
OCR PDF →Apply text recognition to scanned pages so identifiers can be located across the whole record rather than read page by page.
- 2
Redact protected information
Redact PDF →Permanently remove patient identifiers and any clinical detail outside the scope of the specific request.
- 3
Remove hidden content
Sanitize PDF →Clear metadata, annotations, and residual hidden layers so removed information cannot be recovered from the file.
- 4
Flatten the released file
Flatten PDF →Flatten the document so redactions and form content are fixed in place before the file leaves the records office.
- 5
Number the released set
Bates numbering →Apply sequential page numbers so each disclosure is traceable for the records register.
Try it free, right now
Every tool in this workflow is free on the public site — no signup, nothing uploaded. Run the steps by hand to see the output, then license the automated pipeline for your team.
Why run it on-premise?
Patient records are protected health information, and disclosures must limit what is shared to the minimum necessary. Performing redaction on-premise means PHI is never uploaded to an outside service, and permanent removal plus metadata stripping reduces the chance of recoverable identifiers slipping through.
The Business suite ships as a self-hosted bundle that runs inside your own network, so the documents in this workflow never leave the building. See how deployment works.
Requesters receive a properly scoped record set while identifiers stay protected and every disclosure is logged.
Included in the Enterprise license.