Health systems and plans · Tidegate
Health systems and plans

Put your clinical data to work, safely.

The Tidegate engine finds and protects identifiers in your records, notes and documents, inside your environment, so your teams can adopt AI, support research and prepare data for licensing, with independent expert review when you need it. For commercial, Medicare Advantage and Medicaid managed care plans: prior authorization attachments and care management notes, protected before they reach AI review tools or research teams.

SOC 2 Type I and HITRUST e1 in progress · Runs in a cloud account you control · BAA whenever our engineers access PHI · Never buys or sells data
SECURITY RULE HHS has proposed requiring a written asset inventory and a map of how ePHI moves through your systems.The January 2025 proposal would have covered entities review both at least every 12 months. The rule is not final; the federal agenda targets final action around July 2027. AI tools are reaching clinical notes at the same time, so the inventory has to include free text and attachments. Tidegate builds it from the records themselves. Dates as of October 2026.
Path to live

From one dataset to every team

  1. 01BriefWe walk your data, privacy and security teams through the Tidegate engine on fictional records and share the security packet. An evaluation on a sample of your own records follows once your agreements are in place.
  2. 02PilotOne use case goes live, such as notes for an internal AI tool or one dataset for a research partner. Your privacy office reviews the output before it is used.
  3. 03EnterpriseMore sources and teams are added under the same labels and policies, with match quality within your data and a risk summary reported each release.
AgreementsWhenever Tidegate engineers access PHI, a Business Associate Agreement is in place first. For licensing or research sharing, you engage the independent expert, and the determination and the decision to share stay with you.
What you get

What changes on Monday morning.

For data, AI, privacy and partnership leaders

Data your teams can use, and a privacy office that can say yes.

TodayClinical notes and documents hold the detail your AI, research and partnership teams need, and identifiers nobody has measured. Requests from AI developers and research partners arrive faster than privacy reviews can clear them.
With TidegateYou see what your data holds before anyone uses it. Identifiers are protected in your environment, every field carries its permitted uses, and datasets reach expert review fully documented.
Safe AI on clinical dataIdentifiers are found and handled before notes, documents or transcripts reach LLMs, copilots or retrieval systems.Track: sensitive values blocked before reaching a modelSafe AI on clinical data
Data commercialization and researchDatasets prepared in your environment and documented for an independent expert you engage, ready to license or share once the expert's determination is in place.Track: time from request to expert reviewData commercialization and research
Sensitive data discovery and governanceAn inventory of where sensitive data sits across tables, notes, exports and shared drives.Track: sensitive findings outside policyDiscovery and governance
Requests

Where it matters

One pattern for every request: data arrives, Tidegate finds what it holds and what it may be used for, and a person decides.

01Notes for an internal AI tool What arrivesDischarge summaries with names, dates and addresses in free text What Tidegate doesIdentifiers replaced before the text reaches the model, each change logged Who decidesYour AI governance group approves the policy
02Research request What arrivesA request for five years of oncology notes and claims from an academic partner What Tidegate doesDataset labeled for permitted use, with a re-identification risk summary and the release pack Who decidesYour privacy office and the independent expert you engage
03Data licensing What arrivesAn AI developer asks to license de-identified clinical notes What Tidegate doesTransformed in your environment, with consistent replacements and the release pack for expert review Who decidesYou, within the terms of the expert’s determination
04Health plan review What arrivesPrior authorization attachments and care management notes What Tidegate doesProtected before they reach AI review tools or research teams Who decidesYour plan’s privacy office and clinical reviewers

Illustrative. Fictional requests.

Principle

Your data, your decision

Tidegate prepares, labels and documents your data inside your environment. Your privacy office approves each use, and the expert you engage makes the determination. Tidegate never buys, sells, holds or brokers data.

Resolution

The hard cases

THE HARD CASES03 CASES
01A partial phone number in a callback lineFound as PHONE at CONFIDENCE 0.62 and sent to your reviewer. Illustrative threshold: 0.80, set by your team.PHONE · CONFIDENCE 0.62
02A clinician and patient who share a surnameTold apart as NAME · CLINICIAN and NAME · PATIENT.NAME · CLINICIAN · NAME · PATIENT
03A PDF with a text layerIdentifiers in the header, footer and body found and masked. Scanned images from v1.1.MASKED · SAFE HARBOR MODE
How you get it

Deployed with Tidegate Forward Deployed Engineers.

The Tidegate engine runs in a cloud account you control, deployed with Tidegate Forward Deployed Engineers, under a BAA whenever they access PHI. From v1.1: on premises installs.

Coverage

What this means for your data

Health system and plan data carries identifiers in every format: MRNs and member IDs in note text, dates in attached letters, NPIs and DEA numbers next to clinical codes. The Tidegate engine recognizes them across the HIPAA Safe Harbor categories, so you can see what a dataset holds before it is used, shared or licensed.

What the engine recognizes
Designed to support review under HIPAA expert determination 42 CFR Part 2 holds · ROADMAP State health privacy laws
Sample output

Questions we hear first

Can notes be protected before they reach AI tools?
Yes, through the engine’s API in your environment.
What is the path for research release?
Expert Determination mode with the release pack, or a limited data set under your data use agreement, decided by your privacy office.
Who runs it?
Tidegate Forward Deployed Engineers, under a BAA.
Technical fitIn a cloud account you control, next to your data.
MODEBatch over warehouses and note stores; inline before AI tools
INPUTSEHR and claims records, clinical notes, documents with a text layer, transcripts
DEPLOYYour cloud account, deployed with Tidegate Forward Deployed Engineers. From v1.1: your data center
Engine details