Disclaimer and terms
ClinicalBrief is a research and portfolio prototype. This page explains, in plain English, what it is not, how it may be used and what it stores about you. It is not legal advice, and it does not claim compliance with any law or regulation.
Not a medical device. Not for patient care.
- ClinicalBrief is a research and portfolio prototype. It is not a medical device and has not been assessed or approved by any regulator.
- Do not use it for diagnosis, treatment, triage or any other part of patient care.
- AI output can be wrong or incomplete. AI findings are treated as unconfirmed until a person approves or edits them, and the graph, export, risk score and Copilot answers use reviewed findings only. Human review lowers the risk of errors; it does not remove it.
- Copilot is built not to give treatment or dosing advice: if a draft answer contains such advice, the whole answer is withheld. Treatment plans quoted from a record are labelled as documented, not recommended. This guard is rule-based and can miss things.
Synthetic data only
Never upload real patient data. Not de-identified data, not test records copied from a real system, not your own notes.
The demo data is synthetic, generated with Synthea and Synthea Coherent (CC BY 4.0). The people in it do not exist. Sources and licences are on the data page.
Terms of use
- Access is by invitation only.
- New accounts start with no access. Every feature stays locked until the project owner grants a role.
- Only access the records your role allows. Do not try to reach data you are not assigned, probe ids, or get around the access controls.
- The software and the demo are provided “as is”, without warranty of any kind. They may change, break or be taken offline at any time.
What we store about you
Account
Your email address and your role, held by Supabase Auth.
Audit log
Actions you take: who, which record id, and when. Never the text of a note or of a Copilot question or answer.
Copilot conversations
Conversations you create. You can delete your own; deletion is permanent and cannot be undone. The audit log keeps only that you deleted one.
The database is Supabase Postgres, hosted in the Sydney region.
The AI model runs locally. No patient data is sent to external AI services.
The site uses no analytics or advertising trackers.
Cookies and local storage. Only what the site needs to work: Supabase sign-in cookies that keep you signed in (set only when you sign in), and your dashboard layout saved in this browser's local storage. Nothing is used for tracking or advertising, so there is no cookie banner; signing out ends the session.
Found a security issue?
Please report it privately by email rather than opening a public issue or sharing details publicly. Never include real patient data.