Minimum order: 10,000 patient records. PHI Mask Batch offers redaction or supports de-identification workflows across patient records, legal files and financial documents. Run it on-prem, or our team does it for you or with you.
Run offline, PHI Mask Batch is HIPAA-compatible. Your files are masked in your environment and never sent to us, so there is no BAA to sign, and without a signed BAA we cannot claim HIPAA compliance.
It runs inside the controls you already audit, so it is also GDPR-compatible, PIPEDA-compatible, PHIPA-compatible, SOC 2-compatible and ISO 27001-compatible.
Your own staff review the sample, so nobody from PHI Mask sees a file.
Our team sets the rules, runs the batch and checks the sample, for you or alongside your staff. In your environment or ours, under your BAA and NDA.
In Canada, we sign your agent or information manager agreement. In the EU, your data processing agreement.
You keep the key and the sign-off.
Both routes run the same software. You pick the route for each batch.
PHI Mask holds no SOC 2 report and no ISO/IEC 27001 certificate. Privacy and security review
They run it on their side. You receive redacted copies.
Under TCPS 2, secondary use of non-identifiable information needs ethics review but not consent.
Names and numbers are redacted before training. The language stays.
Client names, addresses and account numbers are redacted before review.
Names and account numbers are redacted before an auditor, vendor or model sees them.
Give the vendor redacted copies. The originals stay where they are.
We start from a rule set for health, legal or financial documents. Your privacy office, expert or counsel can change it.
[patient-0412], born 1980. Health number [health].
Seen 2026-03-02. Harvey-Bradshaw Index 5. Weight stable at 68 kg.
MR enterography on 2026-06-06 showed 12 cm of active terminal ileal inflammation.
Works at [employer]. Lives with partner [relative-1] in [place].
| Files in | 10,000 |
|---|---|
| Masked | 9,964 |
| Held for a person | 36 |
| Pages read | 212,480 |
| Scanned pages | 31% |
| Names | 418,202 |
| Dates | 96,114 |
| Record numbers | 61,870 |
| Phones and emails | 20,913 |
| Addresses | 12,455 |
| Sample reviewed twice | 3,000 pages |
| Misses found in that sample | Listed by type |
| Rule set | v3 · sha256 41ab…07c2 |
| Build | sha256 9f2c…e41a |
Counts and hashes only. No patient text.
A counts-only inventory of formats, pages and scans.
A fictional set runs first, and your team reads a real report.
Your privacy office, expert or counsel sets what is redacted.
Every file runs on-prem, or with our team.
Your reviewers, or ours, check flagged files and a 3,000-page sample. Plan on about 200 reviewer hours. A further batch on the same rules samples 600 pages.
Your privacy office, expert, ethics board or counsel reads the release report.
On-prem, your own staff do, so nobody from PHI Mask sees a file. When our team does it, our reviewers work under your BAA and NDA.
That decision belongs to your privacy office, expert or ethics board. The release report gives them the counts, hashes and sample findings to decide. In Canada, it turns on who holds the key.
An independent expert you choose. The batch rules, the release report and the sample findings are their evidence.
When our team does it: your BAA and NDA, your agent or information manager agreement in Canada, your data processing agreement in the EU. On-prem, no BAA, because your files never reach us.
On-prem: one offline container on your server, your cloud or your partner's machine, with no outbound connections. With our team: your environment or ours.
No. A standard batch uses pattern matching and OCR, with no LLM or generative AI.
Yes. Scans are read page by page. Handwriting is read on a best-effort basis, and those pages are held for a person.
The sample review sets the date, and we agree it when we scope.
Minimum order: 10,000 patient records. Scans included. 10,000 five-page files are 50,000 pages: US$4,000 on-prem.
| On-prem | With our team | |
|---|---|---|
| Per 1,000 pages | US$80 | US$160 |
| Set-up, once per rule set | US$2,500 | US$2,500 |
| First sample review | Your staff | US$10,000 |
Over a million pages, we quote volume pricing. Under 10,000 patient records? For individual files: PHI Mask Professional masks them in your browser
Tell us the record count, file types and who runs the batch. We run a fictional set first, before any real file goes in.