Privacy Policy
Last updated: August 8, 2026
MedMalPal is built to help law firms evaluate potential medical malpractice cases. We understand that the records entrusted to us often contain highly sensitive medical information. Protecting that information is fundamental to the way MedMalPal is designed and operated.
This Privacy Policy explains what information we collect and how it is used.
Security & Confidentiality
Medical records require more than encryption — they require responsible stewardship.
Confidentiality is a design principle, not an afterthought.
MedMalPal is designed to help law firms evaluate potential medical malpractice cases while protecting confidential medical information through secure transmission, controlled access, and disciplined data handling practices.
Key Principles
- Medical records are processed only to prepare the requested Merit Review and to answer your follow-up questions about the case.
- Your original uploaded files are deleted shortly after processing.
- So you can ask follow-up questions about a case, we keep an encrypted copy of it — the extracted record text, the merit review, and your questions and answers. It is retained for a limited window — 3 days by default, extendable up to 90 days if you choose to keep a case open — then automatically and permanently deleted.
- Retained case content is encrypted at rest (AES-256) and is accessible only to your firm; even our administrators cannot read your case content.
- No AI is trained on your firm’s or your clients’ information.
- MedMalPal does not sell your or your clients’ information.
- MedMalPal is designed to minimize the collection, retention, and exposure of confidential medical information.
Information We Collect
We collect only the information reasonably necessary to prepare the requested Merit Review.
This may include
- Account information needed to manage your account.
- Medical records you upload for review.
- Limited technical information needed to operate the platform.
Information is used only to
- Prepare the requested Merit Review.
- Operate the platform.
AI Processing
Artificial intelligence is used only to prepare the requested Merit Review.
- Uploaded information is processed only for the requested Merit Review.
- No AI is trained on your firm’s or your clients’ information.
- Your original uploaded files are deleted shortly after processing; the encrypted case copy that powers follow-up questions is retained only for the limited window described above, then permanently deleted.
Changes to This Privacy Policy
As MedMalPal evolves, this Privacy Policy may be updated to reflect changes to the Service or applicable legal requirements.
Material changes will be reflected on this page.
Contact
Questions regarding privacy or this Privacy Policy may be directed to: