Security & data handling
How PhotonMagnet keeps one organization's patients away from everyone else.
This is a demonstration service
PhotonMagnet is offered here for evaluation. It is not a HIPAA-covered environment and we do not sign business associate agreements on this service. Upload only de-identified or synthetic images and records. Organizations that want to use it with real patient data should contact us about a private deployment.
Organization walls
Every patient, study, image, record and analysis carries its organization. Every page loads rows only through the signed-in person's organization, so an id from another organization is simply "not found".
Roles
Organization admins manage people; clinicians upload, add records and run analyses; viewers read. The service operator sees organizations and counts, not patient data.
De-identification in the browser
DICOM files are parsed on your computer. Patient name, ID, date of birth, institution, physicians and every other header field outside a short technical list never leave it. Photos are re-encoded on arrival, which drops EXIF and GPS data.
Private file storage
Images and records are stored outside the web root and served only after the organization check, with no-sniff and sandbox headers.
The AI engine
Images and records for one analysis are sent to the AI provider over TLS for that request only. The provider's API does not use them to train models.
Audit log
Opening a patient, a study or a record file, uploads, analyses, invitations and role changes are recorded with the person and time. Organization admins can read their log.
Sign-in protection
Passwords are hashed, repeated failures are throttled, invitations are single-use links that expire after 14 days, and disabled members are signed out on their next request.