Patient Privacy Notice

MedGram accepts de-identified content only. Patient-identifying information must not be entered into any clinical feature, and all case discussions must be fully de-identified before submission. Do not include patient names, medical record numbers, dates of birth, contact details, physical addresses, government or insurance identifiers, identifiable patient photographs, or any other information that could identify an individual.

Submissions to designated clinical tools are screened for common identifiers, and a submission that appears to contain patient-identifying information can be blocked. This screening is a safeguard, not a guarantee: it may not catch every identifier, and de-identifying clinical content remains the responsibility of the clinician submitting it.

Clinical media is held to the same standard. An image or recording must first be registered in MedGram, where it is stored privately and bound to the account that registered it, and the registering clinician must confirm a de-identification attestation before any tool will process that file. Ownership is re-checked on every processing call: one account's registered media cannot be processed by another account's tools.

Notes, summaries, handoffs, letters, patient materials, differentials and evidence briefs are drafts. Calculators, code, drug, laboratory and terminology lookups return reference results from their source data. Neither kind is a diagnosis, and neither replaces professional judgment. A qualified professional must review and verify every output against the source record before any clinical use.

MedGram's clinical AI requests are processed through MedGram's managed providers, which are bound by confidentiality obligations and process only the de-identified content submitted. MedGram does not claim HIPAA certification for any feature, and does not warrant that any output is free of error or omission.

A business associate agreement held by you or your organization with a third-party AI provider applies to your relationship with that provider. It does not extend to MedGram's managed processing or to the platform as a whole.

The rights available to you over your own account information — access, correction, deletion, portability and restriction of processing — are set out in the Privacy Policy, along with how to exercise them. Requests can be sent to contact@medgram.org or through our contact form.

• Privacy Policy
• Patient Privacy & De-Identification
• Terms of Service
• Medical Disclaimer