PHI Handling Notice
Do not enter protected health information (PHI) into any Neurona 28 input field, form, or chat interface.
Neurona 28 is designed to minimize contact with protected health information (PHI).
Architectural Design: The platform does not connect to, scan, or ingest data from Electronic Health Records (EHRs). Clinical findings are entered manually by the user. This is a deliberate design decision that keeps the human at the center of the workflow and reduces the risk surface for PHI exposure.
User Responsibility: Users are instructed to enter de-identified clinical findings only. Do not enter patient names, dates of birth, Social Security numbers, medical record numbers, addresses, or any other information that could identify an individual patient.
OK to Enter: De-identified clinical descriptions. Example: "Patient 67M. Assessment: DM2, HTN, CKD. Lab: eGFR 38."
NOT OK to Enter: Any patient identifier. Example: "John Smith, DOB 03/15/1958, MRN 12345678."
If PHI Is Submitted: If you believe you have inadvertently entered PHI, contact us immediately at [email protected]. We will work with you to identify and remove the data.
Security Measures: Encryption at rest (AES-256) and in transit (TLS 1.2+). Audit logging. Access controls. Data Processing Agreements with all vendors. These represent our planned security baseline. See our Security page for details.
This Notice Is Not a BAA: This notice describes our data handling approach. It is not a Business Associate Agreement (BAA). BAA availability will be evaluated at a later stage.
Neurona 28, LLC · Puerto Rico · [email protected]