Upload privacy

Privacy & Upload Data

ScanBodAI sends uploaded files to its servers for processing. Filename aliases and selected metadata cleaning reduce identifying text, but do not guarantee that a file contains no patient information. Remove patient names, case identifiers, and other personal information before uploading.

What the upload controls do

Filename aliases

The identification interface sends a neutral filename alias. The server also replaces unrecognized filenames with a random alias. These aliases are not hashes of patient names.

Selected mesh metadata

The server replaces binary STL headers and the opening ASCII STL name field, and removes selected PLY comments and OBJ metadata. This happens after the file reaches the server. Geometry is not removed by these controls.

Limits of cleaning

Cleaning selected fields is not a complete review of every file or format. Identifiers can remain in unsupported metadata, visible image content, mesh annotations, or information typed into the site.

Example filename alias

This demonstration generates a random alias in your browser. It does not upload a file or clean its contents.

scan_a3f8c12d9b01.stl

Data that can be retained

Accounts and scan history

Signed-in activity can be associated with your account. History can include the scan alias, timestamp, measurements, candidate results, confidence information, and feedback. Guest attempts may also be recorded.

Geometry and diagnostics

Temporary processing files are cleaned up, but diagnostic snapshots, proof images, reports, and geometry retained by enabled calibration or learning workflows may persist. Uploads are not covered by a blanket immediate-deletion promise.

Shared results

Saved shared records retain a result snapshot. Other snapshot links include result data in the link itself. Anyone who receives either kind of link can view the shared result, so review it before sharing.

Service and usage records

Operational logs, usage analytics, account information, and support messages are handled separately from scan history. A neutral scan filename does not make all activity anonymous.

Before you upload

Use de-identified files you are authorized to provide. The controls described here are implementation features, not a claim of HIPAA certification or complete de-identification. Do not rely on filename replacement to remove information embedded in a scan or image.

For questions about retained data or a deletion request, contact ScanBodAI. Include a scan alias when available, rather than patient details.