Do not enter identifying information
Do not enter names, birth dates, exact addresses, phone numbers, email addresses, insurance or member numbers, medical-record numbers, prescriptions, medical documents, photographs, or payment information in the current demonstration.
AI processing
When the live Cora connection is configured, conversation text is transmitted to the contracted AI service to generate a response. The application requests that responses not be stored by that service. Formal hospital deployment involving protected health information requires separate contracts, approved retention controls, security safeguards, and facility-specific privacy documentation.
Sponsor wall
Sponsors do not receive private conversations, user identities, medical interests, facility callback requests, or patient-level activity. Sponsor reporting is limited to appropriately aggregated program information.
Facility reporting
An active facility program is intended to provide aggregate operational patterns and consented structured outreach requests. Private conversation access is not the default reporting model.
Before hospital deployment
The production service will require a formal privacy and security risk analysis, business-associate agreements where applicable, access controls, audit logs, retention and deletion rules, incident response, vendor review, and legal approval.