Trust & Security

Built so patient data never sticks around

ClearPass.health is run by a practising UAE physician. It's designed around one principle: do the documentation work, hold none of the data. Here's exactly how that works.

Clinical text is never stored on our servers

When you generate a note, your text is processed in memory to produce the output, then discarded the moment the response is returned. We never write your clinical text to disk, and we keep no server-side history of your notes.

Your note history stays on your device

Generated notes are saved only in your own browser, on your device. They never reach our servers, and clearing your browser clears them.

Identifiers are auto-redacted before processing

Before any text leaves our backend, a redaction pass strips common identifiers — Emirates IDs, phone numbers, emails, MRNs, labelled names and dates of birth. You should still enter only the minimum detail needed; the redactor is a safeguard, not a substitute for your judgment. This applies to typed and dictated text — photos you upload are processed as-is and are not auto-redacted, so remove patient identifiers before uploading.

Your notes are never used to train AI

Generation runs on Anthropic's commercial API, which does not train on inputs or outputs and automatically deletes them within 30 days. We don't run ads, we don't sell data, and we use no third-party tracking.

Encrypted, access-controlled, minimal

All traffic is encrypted over HTTPS/TLS. Account data is encrypted at rest, and only the operator has administrative access, behind multi-factor authentication. Because no clinical content is stored, there is little for an incident to expose.

You stay in charge

Everything ClearPass produces is a draft for you to review, edit and sign off before it goes into a record or to an insurer. ClearPass is a documentation aid — the treating clinician remains responsible for the final content.

UAE PDPL aligned. ClearPass.health operates under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). For the full legal detail — subprocessors, retention periods, cross-border safeguards and your data rights — see the documents below.