Built so there’s nothing risky to hand over.

When you run the free Snapshot, everything you type stays in your browser. Nothing is uploaded, nothing is saved on our side, and you don’t create an account. You can close the tab and it’s gone. That’s why we can say “rough numbers are fine” without asking you to trust us with anything yet.

Keystone only ever asks for the financial side: aggregated revenue and hours, how people are paid, and your overhead. There is nowhere in the product to enter a patient name, a note, a diagnosis, or anything clinical. We left those fields out on purpose. Because Keystone is built around money, not medical records, there’s no PHI for us to hold. And on the one path where you clean a real export, the patient columns are stripped on your own computer before anything is sent. If you ever want to confirm that for your own compliance review, just ask. The answer is short. The clean-room design that makes this possible is patent-pending (provisional filed 2026).

Want to use a real export from your EHR? The in-browser shredder strips every column of patient data on your own computer first, so the only thing that ever reaches us is your own clinician-level financial totals, with no patient information in them. See how the shredder works →

Every number in a Snapshot exposes its inputs and assumptions, so you can check our work instead of taking it on faith. The figures come from plain, transparent math, not an AI guessing. And if we ever use AI to speed up the busywork, it never touches anything clinical and never makes the call. You do.