In this article
Principles
- Within your access rights. The AI answers data questions only with data your role and branch are allowed to see; the AI cannot see other clinics' data.
- No free-form SQL. Analysis uses curated data functions (for example revenue summary, receivables aging, expiring stock, sync failures, doctor fees).
- Identities are masked. Patient names, NIKs (national identity numbers), phone numbers, and medical record numbers are replaced with tokens before being sent to the AI model provider, and restored on your screen.
- Actions need confirmation. Proposed actions appear as a Confirm card and are recorded in the audit log.
- Sources for figures. Answers that contain figures link to their sources.
- Model providers. Medivana supports more than one AI model provider. The provider and processing location are chosen after a legal review of data transfers; the list of subprocessors is published on medivana.cloud.
What you should avoid
- Do not paste patient data that is not needed into the chat box.
- Do not use AI answers as clinical, legal, or tax decisions without professional review.
Turning features off
The owner can turn off specific AI features per user (for example the daily summary or AI Scribe).