Security & Privacy
Prometheus Codex handles clinical documentation, so this page is deliberately specific. If a question isn't answered here, ask us — info@prometheushealthsystems.com — and we'll answer it plainly.
Where the data lives.
Patient documents and records are stored in Canada, in the AWS Canada (Central) region. The AI drafting step uses Amazon Bedrock and may be processed in the United States. Patients are told this in the consent notice before any of their information is used.
Who remains custodian.
Your clinic remains the custodian of its patient records. Prometheus operates as a service provider to the clinic, under agreements prepared with privacy counsel. We process chart data solely to draft the forms you direct us to draft.
What Codex does.
Codex drafts administrative forms — insurance and government benefit forms such as the attending physician statement, the T2201 Disability Tax Credit certificate, and the BC PPMB application — from data already recorded in the chart and from patient questionnaires. Every drafted value carries a citation to its source. If the source isn't there, the field stays blank.
What Codex doesn't do.
Codex does not diagnose, treat, or assess patients, and it does not complete opinion fields. Fields calling for clinical judgment are structurally reserved for the clinician: the system cannot fill them. Patient-reported information is labelled separately from chart-verbatim information — values taken word-for-word from the chart — so you always know which is which. Codex doesn’t submit forms anywhere. A form is released to your clinic only when a clinician publishes it after review. Signing it and sending it stay with the clinic.
Patient consent comes first. Codex is used for a patient only after the clinic has recorded the patient’s signed consent. The patient gives it on a paper notice that explains what Codex does, where the information is processed, and who the form is for. A patient can withdraw consent at any time; withdrawal stops any further collection, drafting and release.
Assurance.
A SOC 2 Type II observation window is in progress; the report will be available to clinics and partners under NDA on completion.
This website.
This marketing site sets no advertising, tracking, or marketing-analytics cookies.
Questions.
Write to info@prometheushealthsystems.com.
Found a security issue?
Email security@prometheushealthsystems.com — we respond within one business day.
Have a concern to raise?
You can report it anonymously: report a concern