Security & Privacy
Your verification runs on de-identified data. By design.
Esperline calculates your wRVUs from the codes, dates, and quantities in your billing export, not from anything that identifies a patient. Your data is encrypted in transit and at rest, isolated to your account, and your raw files are deleted after processing. Keeping identifiable information out of the product is not a feature we added. It is the foundation the product is built on.
What we need
What Esperline actually needs from you
Verifying your wRVUs does not require protected health information. The math runs entirely on the codes you billed and how many times you billed them. That means your upload can be fully de-identified and still produce a complete, accurate statement.
Codes, dates, and quantities. Nothing more.
Esperline needs only the CPT and E&M codes you billed, their dates of service, and quantities. That is all it takes to calculate and confirm your wRVUs.
No patient identifiers.
Esperline does not need, ask for, or want patient names, dates of birth, medical record numbers, or any other identifier. Please remove them before you upload.
Fully de-identified, still complete.
Because the calculation runs on codes and quantities alone, your file can be completely de-identified and still produce a full, verified statement.
Please do not upload protected health information (PHI).
Technical safeguards
How your data is protected
The safeguards below are in force for every account, on every upload, all the time.
Encrypted in transit and at rest
Every connection is protected with TLS, and your stored data is encrypted on disk. Your information is never readable in the clear as it moves or sits.
Your data, isolated to you
Every request is scoped to your account. You see only your own statements and records, and no other user can reach them.
Raw files deleted after processing
Once Esperline builds your statement, your original uploaded file is deleted. Only the computed statement remains in your account.
Access is logged
Access to and changes in your data are recorded to an audit log, so there is always an accountable record of what happened.
Authenticated, least-privilege access
Reaching your account requires a secure, authenticated sign-in, and our infrastructure is configured so that systems and people hold only the access they need.
Detail is never sent in email
Our emails are notifications only. Dollar figures, codes, and statement detail live behind your sign-in, never in a message that could sit in an inbox.
Your part
Keeping your upload de-identified
When you export your charge data, you can safely remove anything that identifies a patient: names, dates of birth, medical record numbers, and account numbers. Esperline never uses those fields. The only columns that matter are the CPT or E&M code, the date of service, and the quantity.
Vendors that never receive your charge data, such as our payment processor, sit outside that boundary by design. Your codes and statements stay confined to your account.
What we never do
Four lines we will not cross
We never sell your data.
Not to employers, not to recruiters, not to data brokers. We may use aggregated, de-identified statistics that cannot identify you, your patients, or any employer to improve the product.
We never keep your raw files.
Your original uploads are deleted after processing. What remains is the verified statement Esperline computed for you.
We never involve your employer.
Esperline is independent by design. Your account and your record are private to you. Your employer is not notified and has no access.
We never put your data in email.
Notifications tell you a statement is ready. The detail stays behind your authenticated sign-in, where only you can see it.
Common questions
Security questions, answered
Is my data secure?
Esperline works only with de-identified charge data — the codes, dates, and quantities from your billing export, not patient identities. Your data is encrypted in transit and at rest, access requires a secure authenticated sign-in, access is audit-logged, and your raw files are deleted after processing. You see only your own data.
Do you keep my uploaded files or sell my data?
No to both. Your raw uploaded files are deleted after processing; only your computed statements are kept in your account. We never sell your data. We may use aggregated, de-identified statistics, which cannot identify you, your patients, or any employer, to improve the product.
Have a security question or need to report a concern? Email Support@Esperline.com and a member of the team will respond.
Verified and protected
Your work, verified. Your data, protected.
Know your wRVUs are independently verified, from de-identified charge data that you control.