Designed with security and governance principles

Controls

What we will say in public — and what we will not

• No signed-in roles

  Sign-in is off on this website. There is no role-based product here.

• Protected information

  Sensitive information is protected. The public assessment does not ask for medical files.

• Reviewable activity

  Important public actions can be reviewed later. We do not publish how those records are kept.

• Human override

  Authorized humans reject or revise assisted output. Official determinations remain with the VA, accredited representatives, and clinicians.

• PHI boundary on this website

  Do not submit medical files, DD-214s, or SSNs on the public site. The Claim Readiness Assessment does not require records upload.

• Principles, not an authorization

  Designed with security and governance principles. Not a FedRAMP authorization, not a HIPAA certification, and not an authority to operate.

Stated precisely

• Human review remains required
• Evidence-readiness support — not a decision
• The public assessment does not accept medical files
• Not a HIPAA certification
• Not a FedRAMP authorization
• Not an authority to operate
• Not a crisis line

Built so people can trust the result

Tanner Tobey, CISSP, is responsible for security. Leigh Ann’s process sets the standard the software is meant to serve. The veteran outcome is the purpose.

• A public experience that does not ask for medical files
• Designed with regulated environments in mind — not an authorization
• Careful handling of veteran information
• A person can question and set aside assisted output
• Health-record connection is not offered on this site