Trust, by design
For radiologists who own the report. For IT teams who need to understand the system. A clear view of our scope, data handling and pilot requirements.
Follow the data
Scope
Revelar formats and proofreads radiologist-authored text. You remain responsible for its accuracy, clinical meaning and final sign-off.
The Windows companion rechecks the target and selected text before writing. A changed selection or unverified target stops the write.
Proposed wording changes need your explicit approval. Structural checks limit automatic formatting; they cannot prove clinical correctness.
The original selection is recoverable while the companion holds the current review in memory. Always read the result in your reporting application before signing.
Data handling
The Windows companion sends the text you select to cloud processing. It does not read medical images. The diagram below describes this companion workflow.
Choose your own report text in an allowed reporting application and invoke Revelar.
Selected text is sent to the Revelar service and its AI processing route. An authorised template may also be used.
Read the formatting result and decide on proposed wording changes in the companion overlay.
Check the result in your reporting application. Clinical responsibility and sign-off stay with you.
The web workspace is a separate surface: report text reaches AI services when those features are used, and dictation audio reaches the speech-to-text provider. Neither workflow is local-only.
This is a product-level processing summary, not a customer-specific subprocessor schedule. Confirm the active providers, processing locations and contractual terms with us before a pilot.
| Service | What it handles | What to verify |
|---|---|---|
| Revelar service / Vercel AI Gateway | Selected companion text and web AI requests, routed to the configured model. | Processing location depends on the model route. Zero-data-retention is requested in configuration; this is not a contractual guarantee. |
| Soniox | Speech-to-text for web workspace dictation. The companion does not capture audio. | EU endpoints are configured. This does not establish full EU residency or provider-wide zero retention. |
| Supabase | Authentication, account and organisation data, templates and bounded operational records. | Confirm deployment region, retention and access arrangements for your organisation. |
| Stripe / Resend | Billing and transactional email, respectively. | Confirm the applicable service terms and international processing arrangements. |
Customer drafts are not a persistent server-side report archive. Safety-audit records may retain bounded report fragments for 180 days; developer diagnostics have a 30-day retention window. This is not a promise that no customer data is stored. The privacy notice sets out the separate data categories and retention rules.
Privacy noticeFor IT and procurement
The Windows companion is a pilot offering. Assess the actual workstation, reporting application and data-processing arrangements before clinical use.
Verify selection capture, write-back and recovery in your exact reporting application. Compatibility is assessed per workstation; no named-product integration is claimed.
Pilot builds are unsigned. Your organisation’s application-control policy may block installation. Agree the permitted deployment path with IT before installing.
Request the current DPA and vendor evidence, identify outstanding items, and agree processing, access and deletion requirements before using patient data.
Revelar makes no claim of CE marking, medical-device status, ISO 27001 certification or SOC 2 certification. Security and procurement evidence must be assessed for the proposed deployment.
Documents and review
Account data, workspace text, AI processing, dictation, retention, your rights, and cookies.
Company identity, registered address, enterprise and VAT number, and terms boundary.
Ask for the current DPA, provider evidence, retention details and open procurement items.