Trust & Privacy
Share what helps. Keep control of what matters.
Petohmi is built around a simple idea: ask for less, explain why we need it, protect what is shared, and keep a person in control of important decisions.
Your choices come first
Start with just the basics
You can begin with what changed. Please leave out names, dates of birth, Medicare numbers, Social Security numbers, and other identifying details.
Natural-language understanding, bounded by governance
For ordinary Guide messages, Petohmi can send the current message and a small amount of non-identifying Situation context to a protected language-understanding service. That service interprets meaning; it does not decide Medicare rights, medical necessity, legal outcomes, or perform actions.
Add the notice if it helps
If reading the notice together is easier, you can add a Medicare document. In this preview, the file stays in your browser and is not transmitted or stored.
Your employer does not get your situation
What you tell the Guide, documents, and personal details stay separate from employer reporting. Employer reporting is designed around aggregate, de-identified information.
Security and human authority are built into the way Petohmi is structured
Our safeguards are structured around recognized security and privacy frameworks. We organize them the way NIST Cybersecurity Framework 2.0 does, in six parts, rather than using certification language we have not earned. The Guide also keeps a separate authority layer: a language-understanding service may interpret what you mean, but fixed, human-written rules decide what Petohmi is allowed to say or do.
Govern
Named owners, documented policies, risk reviews, and oversight of the vendors we rely on.
Identify
An inventory of what data exists, where it flows, and how sensitive it is, so we only collect what helps.
Protect
Least-privilege access, strong authentication for administrators, encryption in transit and at rest where server-side processing is used, secrets management, and separation between organizations.
Detect
Security-event logging and monitoring, so unusual activity is noticed rather than assumed away.
Respond
A written incident-response procedure and change review, in place before any real document handling begins.
Recover
Backup and recovery planning, plus retention and deletion controls, so information is kept only as long as it is useful.
How we describe our framework
NIST: Petohmi’s control baseline is organized around NIST Cybersecurity Framework 2.0 outcomes and NIST privacy-risk practices.
Health information safeguards: where identified health information is introduced, the design uses administrative, physical, and technical safeguard principles consistent with the kinds of controls described in the HIPAA Security Rule.
SOC 2 readiness: the control structure includes access, change management, monitoring, confidentiality, availability, and processing-integrity controls commonly examined in a SOC 2 engagement.
Important: framework alignment is not certification. This is a description of the safeguards and control direction. It is not a claim that Petohmi has a SOC 2 report, HIPAA certification, NIST certification, an independent audit, or any other certification or attestation that has not actually been completed.
Knowledge custody across connected systems
PETOHMI is developing a separate research capability that may use approved excerpts from M2M's independently governed knowledge catalog. The M2M source retains its original ownership, version, access restrictions and evidence status. PETOHMI research does not have unrestricted catalog access or permission to copy confidential organizational memory.
This federation remains under implementation review. It is not activated through this public website, and it cannot grant itself medical, legal, insurance or human decision authority.
For Medicare documents
If you choose to add a notice, the production design requires encrypted transmission, encrypted storage when retention is needed, restricted access, audit logging, clear retention rules, and deletion controls. Until that protected document service is activated, this preview keeps selected files local to your browser and does not upload them to a server.