What we collect, and what we cannot.

The software

Claim Workbench runs entirely in your browser, whether you open it on this site or download it and run it from your own disk. Parsing, validation, repair, redaction and search all execute locally. No claim data, no remittance data, no patient data and no usage data is transmitted to us or to any third party. There is no server component to transmit it to.

Patient and provider identifiers are removed at the point the file is read, before the parser, the validator, the search index or any payer profile receives it. This applies to claims and to remittances alike. There is no setting that turns it off, and no mapping table is kept, so nothing in the tool can restore a redacted value. Because the tool runs as code in your browser, redaction is a safety default rather than a control we can enforce against a determined user; the restriction that does not depend on the page behaving is the Content Security Policy described below. The exact fields removed are listed in the documentation.

The software does make two kinds of outbound request, neither of which carries claim data. Web fonts are requested from a font service when the page loads. A PDF reading library is requested the first time you open a PDF. Both are requests for static files. With the network disconnected the tool still parses, validates, repairs, redacts and searches; it simply falls back to system fonts and cannot open PDFs. You can verify all of this by turning off wifi and using the tool.

Reference files you load

The tool can read two optional files you supply: a contracted fee schedule, and the procedure-to-procedure edit tables published by CMS. Both are read in your browser and are never transmitted or stored. The CMS edit files are licensed to you directly when you accept the agreement on the CMS download page, which is why they are not distributed with this software.

Nothing persists

The software stores nothing between sessions. Payer profiles, any knowledge base you load, and the claim in the editor are held in memory only and are gone when you close the tab. There is no local database and no cookie.

Running the tool on this site

You can open the workbench directly in your browser at /tool rather than downloading it. The code is identical and the privacy behaviour is identical: it executes in your browser, and no claim data is transmitted to us.

The hosted copy is served with a Content Security Policy restricting which origins the browser may contact. At present it permits two: the font service, and the library used to read PDF files. Neither receives claim data. This restriction is enforced by your browser rather than asserted by us, and you can verify it yourself: open developer tools, watch the network tab, and paste a claim. Nothing leaves.

This website

This site is static. It sets no cookies and runs no analytics or advertising scripts. Our hosting provider records standard server logs, which may include IP address, browser type and pages requested, retained for a limited period for security and operational purposes.

The site loads web fonts from Google Fonts, which means your browser makes a request to Google when a page loads. If you would prefer to avoid that, the fonts can be self-hosted on request.

HIPAA

Because the software transmits nothing to us, we do not receive, store or process protected health information, and we are not acting as a business associate in respect of your use of the downloadable tool. If you require a business associate agreement for a different engagement, contact us.

The redaction built into the software covers the fields listed in the documentation. It is not a complete HIPAA Safe Harbor de-identification, and it is not a substitute for your own privacy review. Have your privacy officer evaluate the tool before using it with real files.

Contact

Saroha Technologies LLC
971 US Highway 202N, Suite N
Branchburg, NJ 08876
United States
hello@sarohatechnologies.com

Questions about this policy, requests relating to any data we hold, and security reports can all be sent to that address. We will respond within five business days.