NOW AVAILABLEClinical Intelligence Platform — Now Available
Legal
Nyelux is built so that no one needs to share patient health information with it. Clinicians use it to learn about and prepare for the devices they work with, not to document patient care.
The assistant that manufacturers embed on their own websites checks each question for patient identifiers, such as record numbers, dates of birth and phone numbers, and refuses to answer one that contains them. It cannot catch every detail, such as a name, so the list above still applies.
When a hospital opens Nyelux from Epic, Nyelux reads only the clinician’s own practitioner and role records. It never requests patient records.
When we find or are told that patient information has been entered, we treat it as a security incident: we remove it, tell the customer organization, and record what happened and why.
Because the platform is designed not to receive protected health information, Nyelux does not act as a HIPAA business associate for it, and our security program is not a HIPAA compliance program.
The protections that apply to all customer data still apply: encrypted connections and file storage, individual accounts, access enforced by the server, audit logging and automatic sign-out. They are described on our data security page.
If your organization’s review needs more detail, contact us. To report patient information in Nyelux or any other security issue, email security@nyelux.com.