Use cases / Health

Clinical notes,
de-identified first.

Photograph a handwritten note, black out the identifiers in your browser, and ask for a handover summary. Redactions are filled into the image’s pixels before it’s encrypted and sent, and a spoken addendum is transcribed inside an enclave.

An illustration of the workspace with a made-up patient. Undergrove isn’t a medical device and doesn’t give clinical advice.

The workflow

Recorded in the workspace

See it in the workspace.

Verified, and encryptedEach answer shows its path, sealed in your tab, and what actually left the device.

Recorded in the workspace; answers scripted for the recording, some clips sped up. The Verified checks ran in the browser against a recorded attestation.

Where your data goes

Encrypted before it leaves your device.

In your browser

  • Crops the photo and fills redactions into its pixels
  • Shrinks the image and encrypts it, with your question, to the enclave
  • Keeps the conversation in this tab unless you choose to save it

Undergrove’s relay

  • Checks your sign-in and allowance
  • Passes the encrypted image and recording on, unable to read them
  • Sees their size and time

Inside the enclave

  • The vision model reads the redacted page
  • Your dictation is transcribed
  • Tinfoil states nothing in it persists between restarts

Before sending, your browser checks the enclave’s hardware attestation against Tinfoil’s open-source release. Answers come back the same way, encrypted until they reach your browser. What verification proves

Built from

Features in the workspace today.

Page scans

Turn a photo of a page into a document: levelled, cropped and given contrast in your browser, then written out by a model that sees images.

Redaction

Crop, mark up and black out parts of an image. Edits are drawn onto a fresh image, so what’s under a redaction isn’t in it.

Images

Models that see images read the pages, photos and video frames you attach.

Voice and recordings

Speak a message, or attach a recording of up to 30 minutes for a timed transcript. Transcribed inside an enclave.

Conversation settings

Turn memory off for one conversation, so your saved notes don’t go with it, and give it its own instructions.

Read aloud

Listen to an answer, voiced inside an enclave.

What it isn’t

The limits, plainly.

  • Undergrove isn’t a medical device and doesn’t give clinical advice. Check every summary against the source note.
  • Undergrove has no HIPAA business associate agreements and holds no certifications such as SOC 2 or ISO 27001. Use de-identified material, and follow your organisation’s rules.
  • Redaction covers what you black out. Identifiers elsewhere on the page, or typed into your question, are sent as they are.
  • The workspace, relay and gateway haven’t been independently assessed yet.
The full privacy notice

Try it with your own notes.

Open the workspace, add your notes and paste the request. Without live access, answers are prewritten samples.

Open the workspace
The request
Summarise this de-identified note for a handover: active problems, medications with doses, and the plan. List anything illegible or unclear rather than guessing.