Your radiographs stay yours, in the UK, unchanged

Files and records are held in Google Cloud Storage and Firestore in London (europe-west2). The web application is hosted on Vercel with its server functions pinned to London. Payments are handled by Stripe; we never see or store card numbers.

When someone in your team asks the AI assistant a question, the view they asked about is sent to Anthropic's Claude API to produce suggestions. Anthropic processes API data under commercial terms that do not allow it to be used for training their models. Nothing is sent to the AI unless a user asks.

Every upload is fingerprinted with SHA-256 on our server and the fingerprint is recorded with the image and in the audit trail. Identical files on the same report are detected. Anything you make from an image, a processed view, a measurement or a stitched panorama, is stored separately and linked back to its sources. The original can always be downloaded byte for byte.

Each company account is isolated. Users sign in with their own account and have one of five roles: owner, admin, radiographer, viewer or client. Only owners and admins manage users and billing; viewers can look but not change; clients see only what has been shared with them.

Share links give a client read-only access to one job. Before anything opens, the visitor proves their email address with a single-use 6-digit code (stored only as a hash, valid for 10 minutes, five tries); a right code opens a 12-hour session held in a secure, HttpOnly cookie, and every request, open and download is logged against that email. They expire after 30 days by default (you can choose up to 90), can be revoked at any time, and every open is counted and logged. Downloads of originals use short-lived signed links.

Uploads, deletions, assessments, report generation, downloads, AI suggestions and the interpreter's decision on each, share-link creation and every share-link open are recorded with who, what and when. Owners and admins can review the whole trail in the app.

The AI assistant only ever suggests; a qualified interpreter accepts or rejects each suggestion and the AI never records a result. It returns outlines and text only, never altered pixels.

We will not use your images or your interpreters' decisions to improve our own models unless an owner or admin turns on “Allow our AI decisions to help improve Clearshot DR” in Settings. It is off for every new account, and you can turn it off again at any time.

Test Inspect Group Ltd is the data processor for the images and records you upload; your company remains the controller. Our privacy notice and data processing agreement set out the terms. If you leave, we will provide a full export of your originals and records on request and then delete them. Email hello@testinspect.com.

We don't hold ISO 27001 or SOC 2 certification and we won't claim to. Our infrastructure providers (Google Cloud, Vercel and Stripe) hold their own certifications. If your procurement team has a security questionnaire, send it to us and we will answer it honestly.

Found a security issue? Please report it to hello@testinspect.com.