OBSCURA for clinics and healthcare teams
Clinics send patient information more often than anyone would like: a referral letter, a photograph for a second opinion, an export for an audit. These tools redact and check those files in the browser, so the record is never uploaded to a service to be cleaned. They do not make a clinic compliant with anything; they remove one place the data could go.
Where patient information leaks from files
Names in capitals are single tools: free to open and to check a file with, and Pro to save the result. A name marked Pro is a service inside the Sovereign Suite, which is Pro as a whole.
A letter or note shared without the patient
A colleague, a supervisor or a researcher needs the clinical content, not the name, the address or the record number.
- MEDISCRUB: masks names, addresses, postcodes, phone numbers, emails, NHS, Medicare and insurance numbers and record numbers in pasted text, and keeps the diagnosis, findings and medication readable; dates are your choice
- OPTIC: reads the text out of a scanned letter or a photograph, on the device, so it can be masked
- SEAL: redacts a PDF so the text under the boxes is gone, not hidden
Read first: whether it is safe to send a medical letter.
Clinical photographs
A phone photograph carries where and when it was taken, and the frame can hold a face, a tattoo or a wristband.
- CLOAK: strips the location, time and camera details, and blacks out anything in the frame
- VEIL: pixelates a face or a mark at full resolution, so the detail is gone from the file you send
- SCREENSHIELD: black boxes painted into a screenshot from the records system, exported as a new image
Exports for audit and research
Taking the names out does not make a dataset anonymous. A date of birth, a postcode and a sex identify most people between them.
- DATASCAN: finds the columns in a CSV or JSON file that hold identifiers with a shape; diagnoses and free-text notes are not found
- CLEANSHEET: removes hidden sheets, pivot caches, formulas and comments from an .xlsx
- ANON: consistent codes from a keyed hash, the same code for the same patient in every file
- CROWD: works out k-anonymity: who is unique, and what blurring each column would buy
- SAMPLE: a seeded random sample of records for a clinical audit, which anybody can reproduce
Read first: k-anonymity before you publish.
Sending to a patient, a colleague or an insurer
Email passes through several systems on the way, and each can read an ordinary attachment.
- Send a file securelyPro: files sealed into one page that opens with a passphrase sent another way
- CAPSULE: the encrypted, self-opening HTML file behind it; the recipient needs nothing installed
- PADLOCK: an AES-256 password on a PDF
Records and when something goes wrong
The registers a practice is asked for, kept where the practice can find them.
Why it matters that the file stays on the machine
Uploading a patient’s letter to an online redaction or conversion service is a disclosure to that service, whatever its terms say it does next. With these tools the file is read from the clinic’s own computer and worked on in the browser tab, and nothing is uploaded. No health information reaches us, so there is none for us to hold, lose or disclose.
That is a fact about how the software is built, not a certification. OBSCURA does not claim compliance with HIPAA, the UK GDPR or any health data standard, and it is not a medical device. A clinic using it still has to meet its own obligations: who may see a record, on what basis it is shared, how the computers it sits on are secured, and how long it is kept.
Masking is not anonymising. MEDISCRUB finds identifiers that have a shape. It does not find a name in a sentence no list contains, a relative, or an employer, and a rare condition in a small place can identify a person on its own. Read the masked version through before it goes.
A worked example: a case sent for advice
A GP wants a specialist’s view on a case without sending the patient’s identity. On the practice computer:
- The referral letter is a scanned PDF. OPTIC reads its text on the computer.
- MEDISCRUB masks the name, address, NHS number and hospital number. Dates are kept, because the interval between onset and presentation is the point of the question.
- The GP reads the result through and removes, by hand, the one detail no pattern could know about: the patient’s employer.
- The photograph of the lesion goes through CLOAK, which strips the location and time, and VEIL covers a tattoo at the edge of the frame.
- Both go to the specialist through Send a file securely, with the passphrase given by phone.
What it costs a clinic
Every tool above is free to open and to check a file with. Saving the redacted PDF, the cleaned photograph or the checked export is Pro.
- Free, for everyone
- The Workspace: Docs, Sheets, Slides, Notes, Calendar, Tasks, Contacts, Plan, Drive and the PDF editor, at work as well as at home. And every single tool on this page, to open a file and see what it finds, with no account.
- Pro, for one person
- $15 a month or $144 a year, with 7 days free. Saving the result in every tool outside the Workspace, the whole Sovereign Suite and the Photo Editor.
- Team, up to 25 people
- $69 a month or $690 a year, with 14 days free. Everything in Pro for up to 25 people on one key for the whole team, a Stripe invoice with your organisation’s name and tax number, and email answered by a person within a working day.
- Not included
- No admin console, single sign-on, audit log or shared team storage: each person’s work stays on their own machine. The page for teams lists the rest, with the answers a security reviewer will ask for.
From five people, Team costs less than five Pro subscriptions. Checkout is Stripe’s: the card is asked for at the start and not charged until the fourteen days are over, and if you cancel before then nothing is paid.
Questions
Is OBSCURA HIPAA compliant?
We make no such claim, and no software on its own makes an organisation compliant. What can be said precisely is that the tools run in the browser and no patient file is sent to us or to anyone else. The clinic’s own obligations are unchanged.
Is a masked record anonymous?
No. It is de-identified: the direct identifiers are gone, and what is left can still identify somebody in combination. MEDISCRUB says so on its own page, and it is not a safe-harbour determination or a legal opinion.
Where does the data sit while a tool works?
In the memory of the browser tab, on the computer in front of you. Anything saved goes to a folder you choose. A few tools keep their own records in that browser’s storage, which clearing site data removes.
Does it need anything installed on practice computers?
No. It is a web page over HTTPS in a current browser. The page for teams has the answers your IT provider will ask for, including how to confirm nothing is uploaded.
Can it read handwritten notes?
OPTIC is built for printed text in photographs, screenshots and scans, and marks every word it is not sure of. Do not rely on it for handwriting.
The same tools, for other work
This page describes what the tools do. It is not clinical, legal or compliance advice, and nothing on it says that using them meets any health data requirement.