Security Notice

The extraction app. Runs self-hosted inside your infrastructure. Patient data, documents and extracted output remain entirely within your environment. No external API calls are made during extraction unless you enable AI assistance, and encryption is handled by your own infrastructure.

Synthetic libraries. Every PDF carries a visible synthetic disclaimer on every page. Libraries are generated from curated case files and phrase banks. Downloads are direct, without third-party file-share processors unless you request one. The libraries are not licensed for clinical, claims, underwriting, regulatory or legal use.

This website. HTTPS everywhere with HSTS. Hosted on Vercel. Static generation keeps the attack surface small.

Operations. Private source repositories with access controls. Two-factor authentication on all administrative accounts. Production deployments gated on the main branch. Secrets managed through environment variables. No production access from personal mobile devices.

Vulnerability reporting. Email jack.webb@rootcauseanalytics.com.au with coordinated disclosure. We respond within five business days, AEST.