Trust center
Privacy notice
The current public deployment is intentionally limited to a bundled fictional bill. It rejects personal bill PDFs, bill photos and denial text by default.
What the public demo processes
The demo sends the bundled fictional PDF to the Claim Guardian backend for extraction, then compares the returned rows with a bundled fictional EOB fixture. It uses a short-lived, signed anonymous session stored in an HttpOnly cookie. No user account is created.
What it does not accept
Do not submit names, dates of birth, member IDs, account numbers, medical records or any other real patient information. Personal-input routes remain disabled unless an operator deliberately enables the private deployment controls.
Storage, cache lifetime and subprocessors
The browser no longer uploads PDFs to public Vercel Blob storage. Requests pass through a same-origin proxy to the configured analysis backend. The demo backend currently limits its derived-result and execution-cache entries to a 1,800-second default TTL. That application TTL does not prove deletion from extraction or model providers; their retention and deletion terms still require contract review. Before any private deployment accepts real bills, its operator must publish the complete retention schedule, deletion process, subprocessors, geographic processing locations and contractual safeguards.
Cookies
The cg_session cookie is necessary to bind analysis requests to one anonymous session. It is HttpOnly, SameSite=Lax, Secure in production and expires with the backend-issued capability.
This notice describes the public demo containment state. It must be revised before personal uploads are enabled.