Attunement Redact

Upload a document, and the tool scans it for common protected health information and returns a redacted PDF you can download. It runs open-source models to catch PII in context rather than only where they match a known pattern.

What it does

It scans uploaded documents for common PHI identifiers, including names, dates of birth, addresses, medical record numbers, and phone numbers. It redacts the identifiers it detects and generates a downloadable PDF. The redaction is destructive: the underlying text is removed from the document rather than covered with a black box, so the original characters cannot be recovered by selecting or copying from the output.

What it does not do

It does not guarantee complete or error-free redaction. It does not replace your professional judgment or your organization’s compliance review. It does not detect every possible variant of PHI, and it is weakest on handwritten notes or signatures, unusual formatting, indirect identifiers, and identifiers that are uniquely identifying in context, such as a rare diagnosis paired with an employer name. It is not a substitute for your organization’s HIPAA-compliant handling procedures, and it does not perform Safe Harbor de-identification or expert determination under 45 CFR 164.514. This is a redaction aid. Treat its output as a first pass.

What happens to your file

When you upload a document, it’s stored on encrypted storage inside our secure environment and processed entirely on our own servers; the text of your document is never sent to any third-party AI service or external API. Nothing in your file leaves our infrastructure. Your original document, the redacted results, and any exports you generate are all encrypted at rest, and access requires an authenticated account.

We keep your uploaded documents and their results for 7 days, after which they’re automatically and permanently deleted; this includes originals, redacted output, and cached exports alike. You can also delete a document or batch yourself at any time, which removes it immediately rather than waiting for the 7-day window. Deletion is permanent (there’s no trash or undo), though for disaster-recovery purposes deleted data can persist in our encrypted backups for up to 14 additional days before those backups also expire. A record that a document existed and was deleted is kept in our audit log, as required for compliance, but the audit log never contains your document’s contents.

Before you use it

Review every output before you share it. The most dangerous failure mode is a run that completed successfully and looks clean but missed something on a page deep within the document. Read the redacted document the way you would read one a junior colleague prepared for you.

Upload only documents you are authorized to process, and only after you have reviewed the terms and the business associate agreement presented at sign-in. You remain responsible for compliance with HIPAA, California’s Confidentiality of Medical Information Act, and your own organization’s policies when you use this tool.

If a document contains unusual PHI formats or is unusually sensitive, do the manual pass first and use the tool as a backstop rather than the other way around.

Why we’re giving it away

Attunement builds the clinical assembly layer: we turn raw medical records into structured, source-traced chronologies where every extracted fact links back to the page it came from. Redaction is a small piece of the same problem, which is that records arrive as a pile and every downstream use requires someone to read all of it. Our customers and collaborators asked for this tool, and found it valuable; so, we felt that it might be useful to others too!

We care deeply about patient privacy and confidentiality, and we want to make it easier for providers to abide by best practices, especially as the use of AI becomes more prevalent.

If you work with records at volume and the bottleneck is assembly rather than redaction, get in touch.