What we keep

Your original papers

They never leave your device. Your browser opens them, reads the text, and you black out your details. They are cleared when you press Stop or close the tab.

The blacked-out copy

Only the blacked-out pages (an image of each page with black boxes, and the page’s text with the hidden parts removed) are sent to Sahi’s server, to run the check. The server passes them to the AI service, then drops them. They are not written to storage and not put in logs.

To check that all your papers are for the same person, your browser also sends a short one-way code for the name, member ID and claim number it found on each paper. The codes are made with a random key that stays in your browser, so the server can only see whether two papers match, never the name or number itself. A new key is made each time, and the codes are dropped with the rest.

The AI service

The AI service reads the blacked-out pages and keeps what its own terms say. We are asking for zero data retention and no training, in writing. In this test version the AI service is: the provider set on the server.

Your report

Built in your browser. Sahi does not keep it. The PDF is made in your browser too. Emailing the report is not switched on in this version.

Your email (only if you give it)

We keep: your email, which boxes you ticked (updates, waitlist), the version of the wording you saw, the time, and counts with no contents (bill only / EOB only / both, check level, number of pages). We don’t keep papers, findings, amounts, provider or insurer names, or codes. We keep it until you ask us to remove it.

We don’t send a confirmation email yet, so we can’t confirm an address belongs to the person who typed it.

The reading tools

To open PDFs, read photos and make the report PDF, your browser downloads free open-source tools (pdf.js, pdf-lib, Tesseract) from the jsDelivr network, at fixed versions that your browser checks before using them. Like any website, jsDelivr sees your internet address when the tools download. Nothing from your papers is sent to it.

Feedback and usage counts

Feedback is saved with the screen name only. Before saving, we remove anything that looks like an ID number, a phone number or an email. Usage counts (for example “report shown”, time taken) have no contents.