Data handling

EOB Reader is a portfolio project for learning. It is not a HIPAA-compliant product. It does not offer a Business Associate Agreement, and it is not for real patient information.

What happens to a file you upload

• The PDF is stored in a private Supabase Storage bucket, in a folder for your account.
• The app reads the PDF text in the browser and sends that text to the configured extraction providers, in order: Google Gemini, then Groq, then OpenRouter. A provider with no API key is skipped. If AI_PROVIDER=ollama is set, the text goes to a local Ollama server instead.
• A scanned PDF with no text layer is not extracted. You get a short message, and that file is removed from storage instead of being kept as an empty row.
• Nothing is deleted on a schedule. Delete a batch when you want it gone.
• There is no audit log. Sign-in is Google. This app does not store a password.

Questions: shanifadhil33@gmail.com