For clinics, practices and labs

AI in reports and correspondence, without health data leaving with a name on it.

Health data is a special category under Art. 9 GDPR and sits under medical secrecy. filterit pseudonymises patient, social security number, tax id, date of birth and address before the text reaches any AI tool.

Start free See the accuracy

Special category, special rules

Processing health data is prohibited without an explicit basis. Sending it with a name to a provider outside the EU rarely has one.

The ΑΜΚΑ reveals the date of birth

Its first six digits are the date of birth. A tool that does not know what an ΑΜΚΑ is leaves it in the text.

Scanned referrals and results

Many documents are images. That needs Greek OCR and visual redaction, not only a text mask.

What gets detected

What gets detected in your documents

Greek-specific identifiers

  • Social security (ΑΜΚΑ) — Greek social-security number with Luhn and birth-date validation. (check: Luhn)
  • ID card number — Greek police ID card, old and new formats (letters and digits). (check: μορφή)
  • Greek places — Greek gazetteer of cities, municipalities and regions, in every grammatical case.

European and international

  • Phone numbers — Landlines and mobiles for the EU, UK, US/Canada and Switzerland, validated per country. (check: libphonenumber)

People and contact details

  • Names across grammatical cases — Greek NER that follows inflection, greeklish spellings and links the forms of the same person.
  • Email addresses — Email addresses. (check: μορφή)
  • Street addresses — Street, number and area, in Greek and Latin-script text.
  • Dates — Birth dates and other identifying dates. (check: μορφή)

Health and special categories

  • Medical data — Conditions, medication, blood type, record, insurance and prescription numbers, ICD-10 codes.
  • Special categories — Religion, nationality, political and trade-union references, marital status, profession.

In scanned PDFs and images, signatures and stamps are covered by visual redaction, with a preview before it is applied.

Every category and the accuracy measurements

How it works, in three steps

Paste or upload

A report, a referral, a letter to an insurance fund. PDFs and images with Greek OCR.

The AI sees placeholders

“Patient [NAME_1] (ΑΜΚΑ [AMKA_1]), aged [AGE_1], presented with.”. The clinical picture stays, the identity does not.

The answer returns complete

The summary or letter comes back with the real data, in your own account. The mapping never leaves.

Visual redaction on scans

Black boxes over data, signatures and stamps, with a preview. The output PDF has no text underneath.

Data masking for documents

Preview of findings, export to Word/PDF, restore later. Medical terms can be masked as health data.

Chat with restore

History summary, letter draft, translation. Real names on your screen, placeholders at the provider.

Roles and rules per unit

The administrator sets what is always masked and who sees the record. Clinicians work as usual.

What you answer the DPO

  • Pseudonymisation under Art. 4(5) GDPR and an explicit security measure under Art. 32; health data as a special category under Art. 9.
  • Medical secrecy: the AI provider never receives a patient identity. The mapping stays encrypted on EU infrastructure.
  • An audit trail per document for the DPO and for the impact assessment (Art. 35) where required.
  • Dedicated-server, air-gapped with a local model, and confidential-computing editions for units with stricter requirements.

Guides for the GDPR file

GDPR checklist for AI tools in a Greek office

12 points with the articles next to each, a one-page AI-use policy template, what to mask. Greek.

Read PDF

Frequently asked

Is a DPIA needed for AI use on pseudonymised data?

That is your DPO’s call. For systematic processing of health data Art. 35 often requires one; filterit provides the record and the description of measures the assessment needs.

Are diagnoses masked too?

Medical terms can be masked as health data or left, depending on the purpose. For a history summary they usually stay and only the identity leaves.

Where are files stored?

Uploaded files are not stored permanently. Only pseudonymised text and the encrypted mapping are kept.

See it on a medical report

Free account, no card. For units, ask for a demo with your own workflows.

Start free

Legal references are general information, not legal advice. Accuracy figures are published on the accuracy page and refreshed with every release.