Healthcare & Digital Health
Digital health platforms make eligibility, triage and prescribing decisions from photographs patients upload — and reimbursement decisions from documents providers submit. When either can be generated, the clinical and financial risk are the same risk. TruthScan validates both.
THE THREAT
Digital health moved intake, triage and eligibility onto the patient's phone. That was the right call clinically and the right call commercially — but it quietly made a photograph into a control. Patients seeking a prescription they do not qualify for, or a treatment their condition does not warrant, now have a tool that produces exactly the image the eligibility rule is looking for. On the reimbursement side, the same generative capability produces medical invoices and lab documentation that are structurally perfect and clinically fictional.
In seconds
End-to-end verdict, fast enough to run inside an intake flow without adding perceptible latency for the patient.
2 APIs
Image detection for patient photos; PDF detection for medical invoices, prescriptions and lab reports.
Both Sides
Region-level evidence a clinical reviewer can act on, rather than an unexplained score.
ATTACK PATTERNS
Two clinical, one financial. All three arrive as an ordinary upload from an ordinary account.
A patient uploads a generated image of a condition they do not have, in order to qualify for a medication, a treatment or a coverage decision that their actual clinical picture would not support. The reviewing clinician sees a photograph and reasons from it, because reasoning from photographs is what the workflow asks them to do.
WHY THIS ONE IS DIFFERENT
This is not a financial loss in the first instance. It is a patient obtaining a medication they should not receive.
Programs that gate continued treatment, reimbursement or subscription on documented improvement create an incentive to document improvement. Generated or manipulated progress imagery corrupts both the clinical record and any outcomes data built on top of it.
SECOND-ORDER DAMAGE
Fabricated progress photos do not just cost money. They poison the outcomes dataset the program is evaluated on.
On the reimbursement side: medical invoices, superbills, prescriptions and lab reports generated end to end. Correctly coded, arithmetically valid, formatted exactly as the claimed provider's system would format them — describing care that was never delivered.
WHY CLAIMS SYSTEMS APPROVE IT
Adjudication engines validate coding and format. A generated superbill is correctly coded and correctly formatted. That is the whole problem.
THE ENGINES
Photos and documents require different forensic models and APIs — unified in one dashboard and one contract.
IMAGE DETECTION API
Confirms that an image used for a clinical or eligibility decision was captured by a camera, not produced by a model.
PDF DETECTION API
Invoices, superbills, prescriptions, lab reports and prior-authorization documents.
WHERE IT SITS
Two insertion points, one platform: the patient-facing photo at intake, and the provider-facing document at reimbursement.
STEP 01
Patient uploads a condition, eligibility or progress photo.
STEP 02
The Image API returns a verdict and heatmap in one to two seconds — before the clinician reasons from it.
STEP 03
The PDF API scores invoices, superbills and lab documentation on the reimbursement path.
STEP 04
Flagged submissions route to a human with evidence attached. Detection ranks; clinicians decide.
DEFENSIBILITY
In a clinical setting an unexplained score is worse than useless — it asks a reviewer to override their own judgment on the authority of a black box. Heatmaps make the signal inspectable.
Heatmaps for clinical review. The reviewer sees which region of the image drove the verdict, and can weigh it against the rest of the presentation.
Detection never makes the clinical decision. It flags an authenticity problem with an input. A clinician decides what that means for the patient.
Retained provenance. Verdict, model version and timestamp attach to the record, which matters when the record is a medical one.
Retroactive audit on the financial side. Batch-scan reimbursements already paid to size the documentation-fraud exposure.
COMPLIANCE & DEPLOYMENT
SOC 2 Type II
Independently audited security, availability, and confidentiality controls, renewed annually.
ISO 27001
Certified information security management across the full platform and API surface.
GDPR
DPA available. Enterprise customers can pin processing to the EU.
Global Infrastructure
UK, EU and on-premise deployments for Enterprise.
TECHNOLOGY FEATURED IN
Get full forensic reports - heat maps, key indicators, and detailed descriptions.
Free
Try the full engine
Starter
$0.03 / result - $290/yr
For individuals and small teams
Professional
$0.02 / result - $990/yr
For teams in production
Business
$0.01 / result - $3,990/yr
For high-volume operations
No hard quota walls — usage is simply metered at your plan's rate. Custom contracts, SLAs, DPAs, and hosting environments are available exclusively on Enterprise. All plans include SOC 2 Type II compliance.
FAQ
Send us a sample of intake images and reimbursement documents. We will run both engines and show you what came through generated.
NO CARD REQUIRED · UNLIMITED SEATS ON EVERY PLAN · SOC 2 TYPE II · ISO 27001 · GDPR
