Does this make a file HIPAA compliant?

No tool does that on its own. It does the mechanical part of Safe Harbor on spreadsheets, without the data leaving your computer; the decision that a data set is de-identified stays with your organization.

Is protected health information sent to your servers?

No. The file is processed in your browser. Only the row count and a one-way hash of the file are sent, to count rows for your plan.

Data anonymization

De-identify a spreadsheet toward HIPAA Safe Harbor

The Safe Harbor method (45 CFR 164.514(b)(2)) lists 18 identifiers that must be removed. The tool handles the ones that sit in ordinary columns: names, addresses, dates, phone and fax numbers, emails, SSNs, record and account numbers, IP addresses and ZIP codes.

Drop a CSV or Excel file

Or click to choose. Up to 200 MB; the file is processed on this computer and never uploaded.

Use the pseudonyms of an earlier file (load its key file)

What the tool does for each identifier

Names, street addresses, phone and fax numbers, emails, SSNs, medical record, account and other ID numbers, and IP addresses can be removed, cleared or replaced. Dates of birth and other dates can be reduced to the year. ZIP codes can be reduced to their first three digits. Free-text notes can be scanned for the same identifiers.

What you still have to check

Safe Harbor sets ZIP3 areas with 20,000 people or fewer to 000, and ages over 89 must be grouped as 90 or older; both need a decision on the data. Photos, biometric identifiers, vehicle and device numbers, URLs, and any other unique code are not detected automatically. And the method requires that you have no actual knowledge that the rest could identify someone.

Pseudonyms and HIPAA

HIPAA allows a re-identification code if it is not derived from the identifiers and the key is not disclosed. The pseudonyms here are derived from the values with a secret key, so for Safe Harbor, remove or clear identifier columns rather than pseudonymizing them, or have the method reviewed by your privacy officer.

Pricing

Free

10,000 rows a month

Without an account: 1,000 rows a month to try

Create free account

✓CSV and Excel files
✓Names, emails, phones, SSNs, cards, IBANs, addresses
✓Consistent pseudonyms across files
✓Key file to restore originals
✓Free-text scanning
✓Files never leave your browser

Prices in USD are approximate. Checkout charges the exact amount in USD at Stripe’s exchange rate (a 2–4% conversion fee is included), or in euros if you prefer. No VAT or sales tax is added. Monthly, cancel any month. A row is one data row below the header; the same file is counted once, and restoring is free.

Questions

Does this make a file HIPAA compliant?: No tool does that on its own. It does the mechanical part of Safe Harbor on spreadsheets, without the data leaving your computer; the decision that a data set is de-identified stays with your organization.
Is protected health information sent to your servers?: No. The file is processed in your browser. Only the row count and a one-way hash of the file are sent, to count rows for your plan.