Healthcare
A clinic note pasted in for a summary
A nurse tidies a discharge note with an AI tool. The patient's name, date of birth and record number go with it.
>AI data-loss prevention for small practices
Use AI.
Keep patient data out of it.
PromptShield checks what your team pastes into ChatGPT, Copilot and other AI tools, warns them before patient, client or financial details leave, and gives you a record you'd be comfortable showing a regulator.
An AI chat tool
Summarise this for the referral letter: Maria Lopez[NAME], born 03/14/1961[DATE OF BIRTH], record MRN 448-21-907[RECORD NUMBER], seen today for chest pain.
This may contain patient information.
Check before you send it. Your practice owner sees a masked record, never the text.
Edit firstSend anyway
0
characters of what your staff paste are ever stored
80
characters, at most, in the masked excerpt you see: enough to judge a false alarm
5
kinds of sensitive information watched: patient, personal, financial, legal and company code
>Why it matters
Your team already uses AI. Your clients' details go with it.
Nobody means to leak anything. They're just trying to get through the day faster, in tools your practice never signed an agreement with.
Legal
A contract pasted in for a quick review
A paralegal asks a chatbot to spot unusual clauses. Privileged client material is now on someone else's servers.
Accounting
A tax file pasted in to check the figures
A bookkeeper checks a return. Tax file numbers, bank details and income sit in a chat history nobody controls.
>How it works
Protection that runs where the paste happens.
- 01
Install in minutes
Your IT person installs the browser extension and desktop app with one practice code. Staff don't need to sign in to anything.
- 02
Checked on the computer
Names, record numbers, card and tax numbers are found and verified on the device, then masked. What staff paste never leaves the computer as written.
- 03
Coached, not blocked
Staff see a plain warning and decide for themselves. Blocking is there for the riskiest pastes, only if you switch it on.
- 04
A record you can show
Incidents, reports and exports you'd be comfortable showing a regulator or insurer, with one click to mark a false alarm.
>Product
Policies that start from your practice, not a blank page.
We prepare a profile of your organisation. You verify it, and PromptShield fills in your priorities and the apps you approve. You stay in charge of every setting.
Your organisation profile
We research your practice from public information. You check it once, and it shapes everything else.
Priorities you set
Critical, high, medium or low for each kind of information. We suggest; you decide.
Approved apps and websites
Copying between the tools you approve is never interrupted. Anything new waits for your approval.
Keeps finding what's new
New AI tools, websites and services staff start using show up for you to approve or not.
Never in the way
If PromptShield can't be reached, work carries on and the check is recorded later. It never blocks because of its own downtime.
One click for a false alarm
Straight from the activity log. No forms, no confirmation steps.
>Who it's for
Made for practices of 5 to 200 people, with no security team.
Plain language on every screen, written for the owner or office manager, not an IT department.
01
Medical and dental practices
Patient names, dates of birth, record numbers and provider numbers, checked against the official list on the computer.
02
Law firms
Privileged and confidential client material, before it reaches a chatbot.
03
Accountants and bookkeepers
Tax file and social security numbers, bank and card details, client financials.
>Built to be inspected
We keep the rules we help you keep.
A compliance tool gets checked by exactly the people it sells to. These are the rules PromptShield is built around.
- What your staff paste is never stored: not in a database, a log line, an error report or analytics.
- Sensitive details are found and masked on the computer before anything is sent. Pasted text is never sent to an AI model to decide.
- Each practice's data is walled off in the database itself, not just by our code.
- No keylogging, ever. Keystrokes are never recorded.
- If we're down, your practice keeps working.
- Every change to your priorities and approved list is recorded: who, what and when.
See what's leaving your practice.
Set up in minutes. Your staff keep working the way they do now.