Removes patient identifiers, and proves it.
Removes patient identifiers from clinical documents on your own computer, and proves it. Every step is documented. Nothing leaves your computer. Designed for the Safe Harbor method.
All processing happens locally. Your files never leave your computer, never reach the internet, and we never receive them.
No network calls, no telemetry, no phone-home. Designed for offline use. You can turn off the internet while it works.
Every batch produces a dated, signed evidence report documenting what was removed, who reviewed it, and measured accuracy for that version.
Built for two independent reviewers plus physician sign-off. Review state, marked words, and disagreements are all documented.
Open-source. Measured against published benchmarks. See exactly what it removes and why.
Processes Word docs, PDFs, spreadsheets, CSV files, and more—including hidden content, metadata, tracked changes, and comments.
Every release is signed with SHA-256 checksums. After downloading, verify that your copy matches the checksum published on the GitHub Releases page.
On macOS or Linux:
On Windows (PowerShell):
Measured on v1.0.0, before any human review. In the app, uncertain words go to two independent reviewers; these numbers are the floor. Full results and methodology →
| Test Set | Identifiers Removed |
|---|---|
| Held-out benchmark (72 patients, 289 notes, never seen during development) | 89.2% |
| Tuning half (72 patients, 288 notes) | 91.9% |
| ASQ-PHI published external benchmark | 97.1% / 96.8% |
| 1,000 independent surnames | 98.7% |
Report the held-out half if you compare other tools. Measured accuracy is not a guarantee for any given document; human review is required.
Inkguard assists with the Safe Harbor method (45 CFR 164.514(b)(2)). It removes the identifiers the method lists, documents every step, and marks uncertain items for human review. The final de-identification determination is made by your authorized reviewers and physician, not by the software alone.
We do not claim HIPAA compliance or certification. Inkguard is a tool that documents your due diligence. HIPAA compliance is your responsibility as a covered entity. We recommend you consult counsel before using de-identified data.
Files are processed entirely on your computer. We never receive your files, run no analytics, collect no telemetry, and have no network code. Nothing leaves your computer unless you choose to send a feedback report.
Inkguard is open-source (Apache 2.0). You can read the code, audit it, and build it yourself. Measured accuracy is published with test set details. No black boxes.
If you use Inkguard in research or published work, please cite it. Choose the format your journal or style guide requires.
A CITATION.cff file is included in the repository. Citations included with every software export.