How your data is handled
The short answer: your invoices are read on hardware goJILLIAN controls, nothing you send trains an outside AI model, and nothing we show anyone points back to your practice.
Where your invoices go
- 1You upload through your private link
- 2Temporary cloud storage
- 3goJILLIAN-controlled hardware: verified intact and read
- 4Cloud copy deleted, normally within minutes
- 5A person reviews your price check
You upload through a private link. Each file goes directly to temporary cloud storage, then to hardware goJILLIAN controls. There it is checked against a fingerprint taken at upload, to prove it arrived intact, and the cloud copy is deleted, normally within minutes.
If a file doesn't match its fingerprint, the cloud copy is kept so it can be retried, rather than lost. Either way, a storage rule deletes anything left in temporary storage after seven days.
Who handles the data
Invoice contents are not kept in the cloud. These services handle only what they need to:
- Vercel
- Web hosting.
- Cloudflare R2
- Temporary file storage, only until your files reach our hardware.
- Neon
- Our database: each file's name, size, type, and fingerprint, never what's inside; the contact and practice details on your invitation; a record of your authorization.
- Resend
- The acknowledgment email you receive.
- Microsoft 365
- JILLIAN's mailbox, jillian@gojillian.com.
How invoices are read
Your invoices are read on our hardware. They are not sent to an outside AI service to be read. They help JILLIAN read invoices better, on our hardware. Nothing you send trains an outside AI model.
Patient information
We never store patient information. Supply invoices rarely carry it, but some prescription and lab invoices do. If a document you send carries patient information, it is blacked out before anything is kept, and only passed to a vendor when an order requires it. That rule is built into the system, not left to a person to remember.
Compliance
HIPAA is the US law on patient health information. Supply invoices are financial documents and rarely carry any. JILLIAN is not built to receive patient information: anything that looks like it is blacked out before it is kept, and it never goes to an outside AI service. No certification for HIPAA exists, so we do not claim one. If your practice needs a business associate agreement, ask us before you send anything.
The price check involves no card number. We do not store full card numbers. If JILLIAN later manages your purchasing, payments will run through a card provider that holds the card-industry certification, and we will name it here first.
Your upload link
The link JILLIAN sends you is private to your practice. It lets you upload invoices. It does not show you anything anyone else has sent. A link that isn't used expires.
Your vendor accounts
This applies only if JILLIAN manages your purchasing. The price check needs no vendor logins.
You remain the customer of record on every vendor account. You can log in yourself, reset any password, or end our access, at any time. Resetting a password simply ends our access to that account until you grant it again.
During setup, a person in Procurement Operations handles your vendor logins and keeps them in a password vault, never in email or a spreadsheet. Changing an account's verification contact, so JILLIAN can complete two-step sign-in, is a separate permission you grant in your Procurement Agency Agreement.
What we do not do
- Sell or broker your data
- Not to vendors, not to manufacturers, not to anyone.
- Point back to your practice
- Nothing we show anyone identifies your practice or what it paid.
- Train outside AI models
- Nothing you send is used to train an outside AI model.
- Take vendor money
- No rebates, no commissions, no volume payments. JILLIAN is paid by the practice she represents.
- Own or mark up supplies
- Supplies ship from the vendor directly to you. We never hold title and never mark anything up.
- Store card numbers
- We do not store full card numbers.
Certifications
We don't hold a SOC 2 report today. SOC 2 is an independent audit of a company's security controls. We'll pursue one when a customer relationship requires it, and say so before it's finished. Until then, we answer security questionnaires in full, in writing.
If something goes wrong
If something happens that affects your data, we'll tell you promptly, as the law requires, with what we actually know.
Security reviews
If your group has an IT or security reviewer, we'll answer their questionnaire in writing and walk them through the architecture directly.