The wrong patient’s pages, caught before anyone reads them.
Co-mingled medical records detection from Medrecords AI catches pages belonging to another patient before anyone reads them. A misfiled page is a privacy incident waiting to happen — a reportable event — so suspect pages are flagged and quarantined before analysis begins, and every incident prevented is still documented.
How a stranger’s page gets caught.
Every page is checked against the case patient: name, date of birth, identifiers, and clinical continuity. A page that names someone else — or describes a body part, medication, or history that contradicts the rest of the file — is flagged with the mismatch stated.
Quarantine, before anyone reads it.
A flagged page is pulled aside immediately: it never enters the chronology, never surfaces in search or chat, and never lands in a report or production. Reviewers see that a page was quarantined and why, without the other patient’s PHI spreading any further.
An incident prevented is still documented.
Each quarantine writes an audit entry: the page, the stated reason, the timestamp, and the reviewer’s eventual decision. If compliance asks what happened, the answer is a log, not a reconstruction from memory.
One misfiled page is a reportable event.
Co-mingled pages turn up in real productions more often than anyone admits: a fax loaded into the wrong chart, a scanner batch that ran long. Caught downstream, that’s a privacy incident with notification duties. Caught at intake, it’s a log entry. Audit-grade review starts with knowing every page belongs.
See Audit Trail & Chain of CustodyFrom upload to a file you can trust.
Identity checks run at intake, before a single page is analyzed or shown.
Files from providers, payers, and prior counsel go in as received — misfiled pages and all.
Name, date of birth, identifiers, and clinical continuity are verified against the case patient.
Mismatched pages are held out of every output until a human releases or removes them — each step logged.
Who catches misfiled pages with it.
Anyone who merges records from multiple sources into one file — which is everyone.
An evaluator’s report built only on the right patient’s history.
For medical evaluatorsNo stranger’s PHI in your production, exhibits, or demand package.
For law firmsFiles from many sources, checked before they merge into one claim.
For TPAsPrivacy incidents prevented at intake and documented for compliance.
For carriersCo-mingled records, answered.
Every page is checked against the case patient on two axes: identity signals — name, date of birth, record identifiers — and clinical continuity, meaning whether the page's content is consistent with the rest of the file. A left-shoulder operative note inside a right-knee case gets flagged even if no name appears on the page.
It is pulled out of the analysis pipeline immediately: excluded from the chronology, search, chat, reports, and any export or production. Reviewers see that a page was quarantined and the stated reason, but the content is held back so the other patient's PHI stops spreading.
A co-mingled page that reaches a report, a production, or opposing counsel is a disclosure, with the notification duties that follow. Detection at intake means the page never reaches a downstream output, so what would have been an incident becomes a documented catch.
Only by an explicit human decision. If a reviewer determines the page does belong to the case patient — a maiden name, a transcription error — they can release it, and the release is logged with the reviewer and reason. Nothing is released automatically.
Every step writes an entry: detection, the stated mismatch, the quarantine, and the eventual release or removal, each with a timestamp and actor. The log exports with the case, so compliance gets evidence rather than recollection.
Related capabilities
Adjacent features on the same platform — every output source-linked and cited to page.
Duplicate pages across merged files collapsed to one canonical record.
ExplorePHI located and redacted before a document leaves the platform.
ExploreAn immutable log of every action taken on the file.
ExploreCheck whether every page belongs.
Upload one production and see the identity check run page by page. Handled under our BAA; never used to train a model.