For clinics, practices and labs
AI in reports and correspondence, without health data leaving with a name on it.
Health data is a special category under Art. 9 GDPR and sits under medical secrecy. filterit pseudonymises patient, social security number, tax id, date of birth and address before the text reaches any AI tool.
Special category, special rules
Processing health data is prohibited without an explicit basis. Sending it with a name to a provider outside the EU rarely has one.
The ΑΜΚΑ reveals the date of birth
Its first six digits are the date of birth. A tool that does not know what an ΑΜΚΑ is leaves it in the text.
Scanned referrals and results
Many documents are images. That needs Greek OCR and visual redaction, not only a text mask.
What gets detected
What gets detected in your documents
Greek-specific identifiers
- Social security (ΑΜΚΑ) — Greek social-security number with Luhn and birth-date validation. (check: Luhn)
- ID card number — Greek police ID card, old and new formats (letters and digits). (check: μορφή)
- Greek places — Greek gazetteer of cities, municipalities and regions, in every grammatical case.
European and international
- Phone numbers — Landlines and mobiles for the EU, UK, US/Canada and Switzerland, validated per country. (check: libphonenumber)
People and contact details
- Names across grammatical cases — Greek NER that follows inflection, greeklish spellings and links the forms of the same person.
- Email addresses — Email addresses. (check: μορφή)
- Street addresses — Street, number and area, in Greek and Latin-script text.
- Dates — Birth dates and other identifying dates. (check: μορφή)
Health and special categories
- Medical data — Conditions, medication, blood type, record, insurance and prescription numbers, ICD-10 codes.
- Special categories — Religion, nationality, political and trade-union references, marital status, profession.
In scanned PDFs and images, signatures and stamps are covered by visual redaction, with a preview before it is applied.
How it works, in three steps
Paste or upload
A report, a referral, a letter to an insurance fund. PDFs and images with Greek OCR.
The AI sees placeholders
“Patient [NAME_1] (ΑΜΚΑ [AMKA_1]), aged [AGE_1], presented with.”. The clinical picture stays, the identity does not.
The answer returns complete
The summary or letter comes back with the real data, in your own account. The mapping never leaves.
Visual redaction on scans
Black boxes over data, signatures and stamps, with a preview. The output PDF has no text underneath.
Data masking for documents
Preview of findings, export to Word/PDF, restore later. Medical terms can be masked as health data.
Chat with restore
History summary, letter draft, translation. Real names on your screen, placeholders at the provider.
Roles and rules per unit
The administrator sets what is always masked and who sees the record. Clinicians work as usual.
What you answer the DPO
- Pseudonymisation under Art. 4(5) GDPR and an explicit security measure under Art. 32; health data as a special category under Art. 9.
- Medical secrecy: the AI provider never receives a patient identity. The mapping stays encrypted on EU infrastructure.
- An audit trail per document for the DPO and for the impact assessment (Art. 35) where required.
- Dedicated-server, air-gapped with a local model, and confidential-computing editions for units with stricter requirements.
Guides for the GDPR file
GDPR checklist for AI tools in a Greek office
12 points with the articles next to each, a one-page AI-use policy template, what to mask. Greek.
Frequently asked
Is a DPIA needed for AI use on pseudonymised data?
That is your DPO’s call. For systematic processing of health data Art. 35 often requires one; filterit provides the record and the description of measures the assessment needs.
Are diagnoses masked too?
Medical terms can be masked as health data or left, depending on the purpose. For a history summary they usually stay and only the identity leaves.
Where are files stored?
Uploaded files are not stored permanently. Only pseudonymised text and the encrypted mapping are kept.
See it on a medical report
Free account, no card. For units, ask for a demo with your own workflows.
Legal references are general information, not legal advice. Accuracy figures are published on the accuracy page and refreshed with every release.