Privacy Policy

Interoperall provides HL7v2 and FHIR conformance tooling. We are the data controller for the information described below. To reach us about privacy, use our contact form.

Our terms prohibit sending real patient data to our servers. The product is built so you do not need to. Use the browser tools, which never transmit anything, or the Bridge agent, which validates on your own machine. De-identified or synthetic messages are the intended input for everything else.

If you send us real patient data anyway, you are doing so in breach of the terms and without our agreement. We are not your HIPAA business associate and no BAA is in place unless we have signed one with you separately. We will still handle whatever we receive in line with this policy and with our obligations under the Privacy Act - we cannot contract out of those, and we are not trying to - but the decision to send it was yours, and the responsibility for making it is too.

• HL7v2 message bodies and FHIR resource bodies.
• Anything you type into an editor: FHIRPath expressions, mapping rules, pasted JSON.
• File names or free text from your machine.
• Card numbers or payment details - those go directly to our payment provider.

This is enforced in the build, not just intended. A static check (check-no-phi-leak.mjs) runs before every deployment and fails it if any code path would write message content to a log, the database, or an outbound request.

Account. Your email address, and your name if you provide one. Used to sign you in and to contact you about the service.

Validation telemetry. For each request to the validation API we keep: the message type (for example ADT^A01), whether it parsed, pass/fail status, counts of rules, errors and warnings, the size in bytes, how long it took, the agent version, and a one-way hash of the client IP. No part of the message itself.

Usage counts. A single number per organisation per month, so plans and overage can be billed.

Product analytics. Page paths, a randomly generated visitor identifier, the referring site and the page you landed on. Self hosted - there is no third-party analytics vendor, no session replay, and no advertising network.

Errors. Error categories and stack locations, with message content scrubbed before anything is recorded.

1. Your message reaches our server over TLS.
2. It is parsed in memory and checked against your spec.
3. The result is written into the HTTP response back to you.
4. The parsed message is discarded when the request ends. It is never written to disk, never logged, and never stored in the database.
5. The telemetry row described above is recorded. That row is the only thing that persists.

Your organisation's history - validation telemetry, API usage log, error records - is kept according to your plan, then deleted automatically:

• Free: 7 days
• Solo: 30 days
• Team: 90 days
• Production and Enterprise: 13 months

Account records are kept while your account exists. Aggregate daily totals - counts with no identifiers attached - are kept indefinitely so we can see long-term trends.

Your data is stored and processed in Sydney, Australia. The database runs in AWS ap-southeast-2 and the application servers run in the same city, so a validation request is handled without leaving the country.

We use these processors, and no others:

• Vercel - application hosting (Sydney, Australia).
• Neon - database hosting (Sydney, Australia).
• Polar Software Inc. - payments, as merchant of record. They receive your billing details directly; we never see or store card numbers. Polar operates from the United States, so billing information is processed there.
• Resend - sign-in and notification email (United States).

We do not sell your data, we do not share it for advertising, and we do not use it to train models.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us and we will respond within a reasonable period.

If you are unhappy with how we have handled your information you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). We would rather you came to us first, but you are not obliged to.

We will update this page when what we do changes, and the date at the top will change with it. If a change materially reduces the protection of information we already hold, we will tell account holders directly rather than relying on you noticing.