Referral redaction is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from a summary sent between providers. anonym.plus does it on your device. The reason for referral stays; the patient is not named.
When this applies
You want to share a model referral with new staff. Names, dates, and both providers must be stripped before the example goes out.
How anonym.plus handles it
- Open the summary in anonym.plus on your machine.
- Local OCR reads any scanned page.
- It flags patient and provider names plus dates.
- Review each flag and keep the referral reason.
- Replace each ID with a label, or hide it.
- Save the clean summary. The source stays local.
What you need to provide
- The summary (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a name map for re-linking.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient | PERSON | Sofia Lang → [PATIENT_1] |
| Referring provider | PERSON | Dr. Park → [STAFF_1] |
| Receiving clinic | ORGANIZATION | Maple Behavioral → [CLINIC] |
| Date | DATE_TIME | Referred 03/12/2026 → [DATE] |
| Phone | PHONE_NUMBER | (503) 555 0133 → [PHONE] |
| Record ID | MEDICAL_RECORD_NUMBER | MRN 47120 → [MRN] |
Compliance achieved
- Removes all 18 ID classes for HIPAA Safe Harbor (45 CFR §164.514(b)).
- Runs offline, so no BAA is required.
- Summaries are kept safe with AES-256-GCM.
- Covers GDPR Art. 9 health data for EU patients.
Anonymize behavioral referral summaries offline — see plans & start free →
Limitations & cautions
Safe Harbor expects no leftover clue that could re-identify the person. The tool clears the 18 ID types. A named provider plus a small area may still hint at identity, so review before sharing.
Frequently asked questions
Are both providers removed?
Yes. The referring and receiving clinicians are identifiers. The tool flags each so the patient cannot be traced through the referral path.
Can I use this as a template?
Yes, once de-identified. With every ID stripped, the file is no longer PHI and may train new staff safely.
Is it uploaded?
No. The app runs on your device. Nothing is sent away.