No PHI on ImOnFHIR infrastructure

The Lab is designed for synthetic or properly de-identified FHIR only. Do not paste real PHI into Analyze, Build, Compare, or hosted FHIR tools.

Payload Washer (client-side)

The Washer runs entirely in your browser. Source payloads are not uploaded to ImOnFHIR servers. It produces synthetic test data — it is not a HIPAA de-identification method. You must already be authorized to view any source you paste.

Payload Compare

Compare is also client-side and makes no network calls for the comparison itself.

Subprocessors

• Vercel — hosting, edge/network, analytics (where enabled)
• Database host (when Lab persistence features are enabled) — synthetic lab data only