Private beta

Give the agent
the data. Not the
identities.

Research data your institution won't let leave the network. Anytomic strips the identities, then locks the agent in a box it cannot read out of or send out of.

Try it in your browser How it runs 

        

          scanning
          000 / 000 replaced
        

      

    

  







  

    

      
01

      
Strip the identities

      
Contents, file names and folder names, against one key.

    

    

      
02

      
Contain the agent

      
Your workspace and its model API. Nothing else is reachable.

    

    

      
03

      
Keep the evidence

      
One page. What was read, what tried to leave, who signs.

    

  







  

    

      
The boundary

      
Not hidden.
Absent.

      

        The key is never mounted into the agent’s filesystem. There is no path to guess,
        no permission to escalate, and nothing to talk it out of.
      

    

    

      

        
live · attempts from inside the box

        

      

    

  







  

    
    


    

      
How it runs

    


    

    

      
RAW / 01

      
Documents fall in.

      
Reports, headers, file names. Identifiers sit inside every one of them.

      
names · MRNs · accessions · dates

    


    
scroll

  







  
Try it

  
Runs in this tab. Nothing uploaded.

  
Open your network panel. There is no request to watch.


  

    

      
      app.anytomic.com / de-identify
      local only
    

    

      
Drop a folder here

      

        or 

      
      

    

    
  







  
The image series

  

    
A study is more than
its report.

    

      Forty axial slices of a real chest CT, the same stack twice. The identity is in
      the tags, in the UIDs and in the path the file is written to. Read the two panes
      against each other and see which of those change, and which one does not.
    

  


  

    

      

        

          Before
          Gonzalez_Alexander_MRN5479144/2024-09-30/IM-0002-0041.dcm
        

        
      

      

        

          After
          7K3QF8ZP/4TVB1XMD/9NQ2W6LC.dcm
        

        
      

    

    

      
      
      15 / 40
      scroll on a slice to step through the stack
    

  


  

    

      
TagBeforeAfter

      
    

    

      
Every date moves by the same 602 days. The study is
        pushed forward, the birth date with it, so the interval between two studies
        for one subject is exactly what it was. Shifting rather than blanking is what
        keeps a longitudinal cohort usable.

      
The path is an identifier too. A tool that scrubs tags
        and writes the study back to Gonzalez_Alexander_MRN5479144/ has
        handed the name over before anything reads a pixel. The tree is regenerated
        from de-identified UIDs.

      

        Volume: ATM’22 airway tree modeling challenge, case ATM_005. 512 × 512
        × 601 at 0.90 × 0.90 × 0.5 mm, lung window, forty axial
        slices from apex to diaphragm. Every identifier shown is synthetic.
      

    

  







  

    
Stated plainly

    

      
Detection is a filter, not a proof. We report what was found rather than
         asserting what was not.

      
Text burned into an image is not handled. Headers, file names and report text are.

    

  







  

    Built by someone who hit this in a hospital lab.

  

    Request access
  

  

    Runs on your machine. Nothing reaches us.