Your file is masked in your browser and never sent to us. Each answer below stands on its own.
Does PHI Mask receive personal health information?
No. Your file is masked in your browser and never sent to us. We keep no copy of your files or text, because we never receive them.
What does our PIA say about PHI Mask?
PHI Mask is the short part of your privacy impact assessment. Your file is masked in your browser and never sent to us, so PHI Mask receives no personal health information, and your PIA has no health information flowing to PHI Mask to assess.
Is PHI Mask compatible with PHIPA, HIA and PIPEDA?
PHI Mask is PHIPA-compatible, HIA-compatible, and Law 25-compatible. Your file is masked in your browser and never sent to us, so there is no agent agreement to sign, and without a signed agent agreement we cannot claim PHIPA or HIA compliance. Nothing of yours is transferred outside Quebec, so there is nothing for Law 25 to assess and no Law 25 compliance to claim.
PHI Mask is PIPEDA-compatible. Your file is masked in your browser and never sent to us, so there is no contract to sign, and without a signed contract we cannot claim PIPEDA compliance.
Where is it processed?
In the browser on the computer doing the masking. Your file is masked in your browser and never sent to us, and we never store it.
Does the extension send anything to PHI Mask?
License activation and renewal send your key, extension version, coarse browser and operating system, and preferred browser language to our licensing service. The popup's Send usage counts setting covers usage counts, daily plan category and Free-limit refusal counts, plus trial, activation and referral events sent promptly when online. It sends no text, files, sites or persistent installation identifier, and you can switch it off in the popup. Pasted text, uploaded files, masked output and detected identifiers are never sent. See the Data usage link below.
Is anything used to train AI models?
No. PHIMask.com does not use feedback, prompts, files, masked content, diagnostics, or customer content to train foundation models.
What if masking misses something?
Detection can miss values, and handwriting is read only on a best-effort basis, so the person masking reviews the result before sending it. Anything missed goes to the AI provider with the masked copy, never to PHI Mask. Sending a masked copy to an AI provider is still a disclosure to that provider, and which AI tools your clinic allows stays your decision.
Will PHI Mask prepare or file our PIA?
No. Your privacy lead completes the assessment for your clinic's workflow, and we answer their questions by email through the request form.
More detail: PHI Mask in Canada · Compliance and attestation · Data usage