Quote requests authorize only the requested benefits services. Census matching, medical or pharmacy data research, predictive scoring and AI processing require a separate project scope identifying the data, population, vendors, recipients, purpose and retention period. Do not submit medical records, diagnoses, prescriptions, Social Security numbers or banking information in this form.
Employer permission is not an individual HIPAA authorization and does not grant access to third-party health records. Before sensitive processing, the applicable legal basis, vendor data and matching rights, security controls and signed BAAs where required must be verified. No identifiable health information may be sent to public AI tools or used to train general-purpose models. Approved AI processing must be restricted to the documented purpose, access and retention terms, with human review.
Employer-facing predictive reports require at least 30 covered lives and aggregate results only. Small cells, rare conditions and combinations that could identify a person must be suppressed, including complementary cells where needed. Thirty lives and removing names alone do not establish HIPAA de-identification. Predictions are estimates, not diagnoses or guarantees, and must not be used for employment decisions or individual eligibility discrimination.
Cross-client benchmarking, public case studies and external research are not included automatically. They require separate written project approval, contractual rights and documented HIPAA de-identification where applicable. Identifiable research requires its own lawful pathway. No sale of identifiable health data or unrelated marketing use is authorized.
Privacy, security and data handling · Questions or prospective withdrawal of optional permission: brad@ichra.shop / 303-903-2054. Withdrawal does not undo prior lawful processing or required retention. A quote checkbox does not execute a BAA or certify HIPAA compliance.