Use ChatGPT for notes and letters. Patient details never leave your computer.
Saibre replaces names, dates of birth, member IDs, and other identifiers with placeholders before anything reaches ChatGPT, Claude, Gemini, or Copilot, and keeps a local log you can file with your risk analysis. Saibre does not make ChatGPT compliant with anything; it just never sees the data.
14-day money-back guarantee · Cancel anytime · Nothing you type is ever sent to Saibre
The rule you're working under
HIPAA's Privacy Rule restricts disclosing protected health information to third parties, and typing a patient's details into a consumer AI tool is a disclosure to that tool's operator. Consumer ChatGPT accounts come with no business associate agreement, which is why the accepted path is to de-identify before anything goes in.
Saibre's approach is different from getting a promise about what happens to data after it leaves: identifiers become placeholders on your machine, so the text that reaches the AI doesn't carry them in the first place. You remain responsible for your compliance obligations — this is a technical control you can document in your risk analysis, not a substitute for one.
What's at stake
HIPAA civil penalties are set per violation and adjusted for inflation each year. As of January 28, 2026 they run from $145 to $73,011 per violation for most tiers, and up to $2,190,294 per violation and per year for willful neglect that goes uncorrected. State attorneys general can bring their own actions on top.
Recent settlements with small providers — a single-dentist practice, a local ambulance service — have run from $30,000 to $90,000 for a single failure such as a missing risk analysis or a late records request. A patient's details pasted into a consumer AI tool is a disclosure you would have to explain in the same forum.
Sources
What the Health pack adds
The Health pack is built around the identifier categories in HIPAA's de-identification standard: names, dates tied to a person, phone and fax numbers, email addresses, Social Security numbers, medical record numbers, health plan and account numbers, and the other categories the standard lists — in clinical notes and records, on top of everything Premium catches. Enroll any patient name or identifier and it is always masked; the pack works without enrollment. Masking identifiers is a technical control you can document, not a determination that data is de-identified.
The log you can document
Every masking event is written to a local log you own: what category was caught, when, and which placeholder replaced it — never the content itself. On Professional you can export it (CSV or JSON, unlimited retention) and file it as evidence that the control was active.
What leaves your machine
Write a progress note: Jane Doe, DOB 01/01/1990, phone 123-456-7890, reports panic attacks since the layoff; continue CBT.
Write a progress note: mask-pii-name, DOB mask-pii-dob, phone mask-pii-phone, reports panic attacks since the layoff; continue CBT.
Questions
Professional — $299/yr or $29.99/mo
Professional
or $29.99/mo
2 months free on annual
For regulated records: profession-specific detection plus the evidence an auditor accepts.
Less than one billable hour a year.
- Everything in Premium
- All four profession packs — Health, Legal, Tax, Financial — detection built for the records each profession keeps
- Exportable protection log (CSV/JSON, unlimited retention) for your WISP, risk analysis, or ethics file
- Regulation-mapped coverage report
- Priority support
Checkout, then download. About two minutes.
14-day money-back guarantee · Cancel anytime · Nothing you type is ever sent to Saibre
Start with the free plan. Upgrade when it catches something.
Two minutes to install. No account. Nothing you type is ever sent to Saibre.