Dataset-registry entries, crosswalk edits, uploaded CSV records, transformations, and snapshots are processed in the browser and stored in that browser’s local storage unless the user downloads or clears them.
The AI form sends only the metadata fields visibly entered into that form. It does not send uploaded CSV records. The server blocks likely direct-identifier field names, redacts common email, telephone, Social Security number, exact-date, and long-number patterns, and limits the number of requests per visitor.
The server forwards the sanitized metadata to the configured Google Gemini API. AI output is an unverified semantic suggestion, not an authoritative terminology mapping. Every suggestion requires human review and verification against LOINC, SNOMED CT, DICOM, RADLEX, FHIR, or another governing standard.
The included PHP proxy does not log submitted metadata. It stores only anonymous per-IP rate-limit counters on the server. Your hosting provider and API provider may maintain infrastructure logs under their own policies.
This application is not a medical device and does not diagnose, predict, recommend treatment, or make autonomous clinical decisions.
Prototype notice version 0.2, August 2026.