What We Do With What You Send
The free review takes no patient data. A customer account runs under a Business Associate Agreement.
Payer, CARC code, count, billed amount. Summaries are kept for 12 months, or less if you ask.
The Free Review
We ask for4 aggregate columns. Patient data: none.
BAA neededNo
Stored inUnited States
No appeal reaches a payer without one of your people approving it.
If You Become a Customer
CO 50
SystemDrafted appeal, cites NCD 160.12
J. OrtizOpened the record
J. OrtizEdited the draft
J. OrtizApproved the appeal
Sample data. Exports as a CSV.
A BAA with every vendor in the path
No tool touches PHI without one on file.
Patient data stays in the United States
One US region for every system that touches it.
No consumer AI tools
Zero data retention on every model API that sees patient data.
A complete audit log
Every record read and every human action. It cannot be edited or deleted.
Nothing submits itself
No appeal reaches a payer without one of your people approving it.
SOC 2 Type II
Planned within 12 months of the first paying customer. Not yet held.
What Ships Today, and What Does Not
If it says live, it runs now. If it says not built, we will not imply otherwise on a call.
Live today
Denial triage
Reads the 835 and ranks each denial by dollars, odds and deadline.
Cited appeal drafts
Every citation links to the CMS policy. Anything else is rejected.
Audit log
Cannot be edited or deleted. Exports as a CSV.
Recovery reports
Recovered, in flight and written off, by payer and category.
Not built yet
Sending the appeal
Your person sends it on your rail and records the proof.
Payer status checks
Your person asks the payer and records the answer.
Local coverage policy
National policy is indexed. Local needs a licence we do not hold.
Voice follow-up
We will buy this, not build it.
Ask a Security Question
Email malte@appealhound.com. One person reads that inbox.
Ask a security questionQuestions People Ask
What if my file contains patient data anyway?
The upload is refused, and we name the column. We do not strip it quietly, because that would mean we held your patient data and told nobody. If PHI reaches us another way, we delete it and confirm that in writing.
Which AI models see patient data?
Only model APIs with zero data retention, under a BAA. Policy search and the citation check use a separate model. It only sees your search words, public CMS text and the draft letter before any patient detail is merged in.
Do you hold SOC 2 or HITRUST?
Not yet. SOC 2 Type II is planned within 12 months of the first paying customer.
Where does your email live?
Our business mailbox is on Google, stored in the European Union today. We do not accept patient data by email. We move it to a US region before we take on a customer. If that matters to you now, say so and we send your review another way.