For practice admin, billing and health-tech
Fewer patient details in every AI prompt.
Billing, intake and support teams paste patient notes into AI tools to write appeals, letters and replies. Tightlip swaps names, record numbers, Medicare IDs and dates for placeholders first, so far less of the patient reaches the AI.
1. Your textOn your device
Billing note for claim appeal.
Patient: Robert Kaminski, DOB 07/22/1958, MRN 00482913.
Seen 09/18/2026 at Lakeside Family Clinic by Dr. Priya Raman (NPI 1234567893).
Medicare MBI 1EG4-TE5-MK73. Phone (614) 555-0142.
The claim for the 09/18/2026 visit was denied as not medically necessary. Mr. Kaminski had chest tightness on exertion and the stress test was ordered per the cardiology referral.
2. What the AI seesSent to the AI
Billing note for claim appeal.
Patient: [PERSON_1], DOB [DOB_1], MRN [MRN_1].
Seen [DATE_1] at [ORG_1] by Dr. [PERSON_2] (NPI [NPI_1]).
Medicare MBI [MBI_1]. Phone [PHONE_1].
The claim for the [DATE_1] visit was denied as not medically necessary. Mr. [PERSON_1_LAST] had chest tightness on exertion and the stress test was ordered per the cardiology referral.
3. The answer you readRestored on your device
Asked: Write the appeal letter for this denied claim.Re: Robert Kaminski, DOB 07/22/1958, Medicare MBI 1EG4-TE5-MK73
Please reconsider the denied claim for the 09/18/2026 visit at Lakeside Family Clinic. Robert Kaminski reported chest tightness on exertion, and Dr. Priya Raman ordered the stress test on a cardiology referral, so it was medically necessary.
What Tightlip catches in healthcare text
Pick the healthcare profile in the extension or the SDK. It adds every full date to the list.
- Patient and clinician names[PERSON_1]
- Names after “Patient:” and similar labels, after Mr., Ms., Mrs. and Dr., in greetings and signatures, and first-name plus surname pairs.
- Record and plan numbers[MRN_1]
- Medical record numbers and health plan IDs after their labels. Medicare MBIs by their published format.
- Provider numbers[NPI_1]
- NPIs confirmed by their check digit, and DEA numbers by theirs.
- Dates[DATE_1]
- With the healthcare profile, every full date is swapped, visit dates included. A year on its own is left alone.
- Ages over 89[AGE_1]
- Phrases such as “age 92” or “92-year-old”.
- Contact and device details[PHONE_1]
- Phone numbers and email addresses. Street addresses and ZIP codes. Device serial numbers after a keyword.
Two ways healthcare teams use it
Practice and billing staff
Install the browser extension and keep using the AI tool your organisation already allows. When you press send, Tightlip swaps what it finds in the message box. The reply shows the real names again on your screen.
Get the extensionHealth-tech software teams
Wrap your OpenAI or Anthropic client with the Tightlip SDK. Your product’s AI features send placeholders to the model provider, and the answers are restored inside your own servers.
See the SDKQuestions compliance teams ask
Does Tightlip make an AI tool safe for patient data?
No tool can promise that. Tightlip reduces what reaches the AI and shows you what will be sent. Whether a tool may receive patient information is a decision for your compliance team and your agreements with that tool’s vendor.
Will you sign a business associate agreement?
No. Harbor Software LLC does not sign business associate agreements. The extension and SDK are designed so Tightlip never receives the text at all, only a credit count.
What can it miss?
Free-text details that do not look like a name, number or date, such as a rare condition, a job title or a small town. Read the protected version before you send, and add recurring names to your always-protect list.
Where does the checking happen?
On the device, in the browser or in your server process. The table that maps placeholders back to real values never leaves it. Details are on the security page.