Watch a denied claim get triaged without the AI ever seeing who the patient is

Pick a sample denial or type your own, then run it. Each step below shows the record exactly as that part of the system sees it. Every value here is synthetic, so please don't enter real patient details.

Jane Doe patient data (PHI) [PATIENT_1a2b3c4d] token that stands in for it

Denied claim

Load a sample, or edit any field.

Patient
Claim
Where to run it
1

Received from the billing system

The webhook checks the API key and validates the payload. Patient data is still in the clear here.

Run a denial to see it arrive.
2

Masked before it leaves

Name, date of birth and member ID become keyed-hash tokens. The same patient always gets the same token, and it can't be reversed without the secret.

Masked record appears here.
3

Classified and drafted by the AI provider

The provider reads the denial codes, picks a category and next action, and drafts an appeal using only tokens.

Category
–
Recommended action
–
Confidence
–
Provider
–
4

Stored in the database

Only the tokenised letter is saved. A database leak would expose no names, dates of birth or member IDs.

Stored row appears here.
5

Returned to the authorised caller

Tokens are swapped back for real values locally, so the billing team gets a letter ready to review and send.

Final appeal letter appears here.
6

Written to the audit trail

Who acted, when, what they did and which record. Entries can only be appended, never edited or deleted.

Time (UTC)WhoActionRecordDetail
No entries yet.