Policy
Version 4 · saved Oct 18 by Maria Alvarez · 6 rules · 1 in test mode · History
Detection packs
Healthcare (HIPAA)SSN, MRN, NPI, ICD-10, CPT, clinical terms
Accounting & taxSSN, EIN, W-2/1099/1040, bank
Legal & titleWire instructions, escrow, privilege
WealthAccount numbers, performance claims
Medical-entity detectionComprehend Medical, HIPAA-eligible, opt-in · adds clinical context to findings
Rules
| # | When | Action | Mode | Last 7 days |
|---|---|---|---|---|
| 1 | Any recipient | Require TLS | On | 2,140 |
| 2 | PHI detected (confidence ≥ 0.75) | Encrypt (locked delivery) | On | 21 |
| 3 | Subject starts with [SECURE] | Encrypt | On | 6 |
| 4 | Recipient is personal mailbox (gmail.com, yahoo.com…) and attachment has ≥ 50 patient rows | Block + notify admin | On | 1 |
| 5 | > 50 recipients | Hold for review | Test mode | 0 |
| 6 | Recipient domain in exceptions (oralsurgery.org — S/MIME) | Deliver with S/MIME | On | 9 |
Rules run in order; the first match decides. Drag to reorder in the live console.