Don't choose between AI
and patient privacy.

You copy a prior authorization letter into Claude to draft the appeal. You paste discharge notes to get a summary. You ask Claude to write a referral. In every case, the patient's name, date of birth, medical record number, and diagnosis travel into the model's context.

Unfiltered. Unlogged. Unrecoverable.

Prior Authorization EHR Summarization Referral Letters

You paste the denial letter and ask Claude to draft an appeal. The letter contains the patient's name, insurance ID, date of birth, and diagnosis codes.

Right now, without Tenet, every identifier in that letter is a HIPAA-reportable event waiting to happen.

prior_auth_appeal.pdf

Process prior auth denial letter

Claude detected 7 PHI entity types and paused before proceeding — without being asked.

You copy a patient's visit history into Claude to prepare for a follow-up. The notes include names, medications, lab values, and social history.

Right now, without Tenet, the full medical record — medications, labs, social history — sits in an unaudited AI context with no record it was ever there.

patient_summary.pdf

Summarize patient visit history

Claude detected 7 PHI entity types and paused before proceeding — without being asked.

You ask Claude to draft a referral to a specialist. You provide the patient's demographics, relevant history, and the reason for referral.

Right now, without Tenet, there's no log it happened and no way to prove it didn't.

referral_draft.pdf

Draft referral to specialist

Claude detected 7 PHI entity types and paused before proceeding — without being asked.

Tenet sits between you and Claude. When you paste patient data, Tenet scans it, replaces every identifier with a placeholder, and sends the cleaned version to Claude. Claude does its work on the sanitized text. When the response comes back, Tenet restores the original names so you see the real output.

Claude drafts the letter. You see Maria's name in the response. Claude never did.

Tenet's HIPAA mode applies the same de-identification standard that your EHR vendor uses. One command activates it. Every interaction is then processed under these rules:

• → Patient names are replaced with consistent placeholders
• → Dates of birth are reduced to the year only
• → ZIP codes are truncated to the first three digits
• → Medical record numbers, SSNs, and insurance IDs are replaced with placeholders
• → Ages over 89 are grouped as 90+
• ✓ Diagnosis codes, procedure codes, and clinical narratives pass through unchanged

This is the same standard your EHR vendor uses for de-identified data sets. Tenet applies it to every interaction with Claude.

Most privacy tools send your data to a cloud service to scan it — which means a third party sees your patient data before it's even protected. Tenet runs entirely on your Mac.