ShifAI · Public demo notice
Security & demo safety
Synthetic data only — no PHI
Do not enter, upload, or submit protected health information (PHI), real patient records, insurance identifiers, passwords, or other secrets in this public demo, demo requests, or contact email. Use invented examples that cannot identify a real person.
What this notice establishes
This notice describes safe public-demo use. It does not establish HIPAA compliance, independent certification, or a verified production security posture. Demo access and product descriptions are not evidence of production controls.
Before any patient-data use, the owner must verify deployment-specific access controls, vendor and model-provider configuration, required business associate agreements (BAAs), audit logging, incident response, and data-handling policies. This page does not confirm that those reviews or agreements are in place.
Report a security concern
Use the contact below to report the affected public URL, what you observed, and safe reproduction steps. Do not include real patient information, credentials, session tokens, or unredacted screenshots.
If you encounter information that appears sensitive, stop interacting with it. Do not download, copy, or forward it. Describe the location without repeating the contents and ask for a secure reporting method.
Review status & questions
These public demo policies require owner and counsel review before production use. They are not an approved production policy, a customer agreement, or authorization to process patient information.
For questions, contact peter@shifaihealth.com. Keep your message non-sensitive; do not send patient information or credentials.