Privacy and security
How this viewer protects the records Pro Scan Partners shares.
Who can see shared records
- Only the email addresses the records were requested for. Each person must prove they control that address with a one-time code every time they sign in.
- There are no passwords to steal or reuse, and no public links: a web address alone never opens a record.
- Pro Scan Partners staff who prepared your request can remove a person's access at any time. It takes effect immediately.
How records are protected
- Encrypted in transit and at rest. Everything travels over HTTPS and is stored on encrypted disks at a hosting provider that has signed a HIPAA Business Associate Agreement with us.
- Automatic sign-out. You are signed out after 15 minutes without activity, with a warning first, so records are not left open on a shared computer.
- Nothing left behind. Images are not saved to the browser's offline storage. If you choose to download a study or save an image, that copy is on your computer and is yours to protect.
- Every access is logged. Each sign-in and each time a study is opened is recorded in a tamper-evident log. Your own recent activity is shown on your records page.
- No tracking. This site has no advertising, analytics or third-party scripts, and uses one cookie only, to keep you signed in.
How long records stay here
Records are available for a limited period chosen when they were shared — 30 days as standard, or shorter when requested — and are then deleted from this site automatically. We email a reminder a few days before removal. This viewer is a convenience copy; the original records remain with the imaging provider, and we can share them again on request.
Images here are reference copies. The viewer is not intended for diagnosis.
What we collect on this site
Your email address, the time and internet address (IP) of sign-ins and record views, and nothing else. This is used only to control and audit access.
Emails from us
We send two kinds of email: a notice that records are ready, and sign-in codes you request. Neither contains medical information. We will never ask for your code by phone or email.
Questions, or something looks wrong
If you see activity you do not recognise, received a records email you did not expect, or want access removed early, contact Pro Scan Partners (phone and email are listed on our website). Security researchers who believe they have found a vulnerability can use the same contact; please do not access records that are not yours.