PHI Detection Guide

PHI (Protected Health Information) detection is a safety feature that automatically scans content before AI processing to identify sensitive healthcare data including:

• Patient Names - Full names of individuals
• Medical Record Numbers (MRN) - Hospital/clinic patient identifiers
• Social Security Numbers - SSNs in any format
• Dates - Birthdates, admission dates, discharge dates
• Addresses - Street addresses, cities, ZIP codes
• Phone Numbers - Any phone number format
• Email Addresses - Personal email addresses
• Account Numbers - Insurance policy numbers, account IDs

Safe AI Workbench uses Microsoft Presidio, a context-aware, open-source PII detection engine:

When PHI is detected, the response includes detailed information:

{
  "completion": "Summary: The patient discussed in the document...",
  "conversationId": "conv_abc123",
  "phiDetected": true,
  "phiEntities": [
    {
      "type": "PERSON",
      "text": "John Smith",
      "start": 15,
      "end": 25,
      "score": 0.95
    },
    {
      "type": "US_SSN",
      "text": "123-45-6789",
      "start": 50,
      "end": 61,
      "score": 1.0
    }
  ],
  "policyViolations": [
    {
      "policyName": "Block SSN in Content",
      "action": "block",
      "message": "Content blocked due to SSN detection"
    }
  ]
}

PHI detection also works on uploaded files (PDF, DOCX, XLSX):

// 1. Upload file
const formData = new FormData();
formData.append('file', fileInput.files[0]);

const uploadResponse = await fetch('/api/files/upload', {
  method: 'POST',
  headers: { 'Authorization': 'Bearer YOUR_API_KEY' },
  body: formData
});

const { fileHash } = await uploadResponse.json();

// 2. Process with AI (PHI detection runs automatically)
const chatResponse = await fetch('/api/ai/chat', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    conversationId: 'new',
    taskId: 'document-summarizer',
    fileHash: fileHash
  })
});

const result = await chatResponse.json();
// Check result.phiDetected and result.phiEntities