Home · About · Developers · Contact · Terms
CoAuth is a demonstration application. It contains no real patient data. Every patient, payer, and clinical record in the app is fictional seed data created solely to demonstrate the WebMCP tool workflow. Any resemblance to a real person is coincidental.
No accounts, no sign-in. CoAuth does not ask for or store credentials. There is no login, and no personal information is collected from visitors.
No server-side storage of your activity. The application
state - the prior authorization you build in the browser - lives entirely
in your browser's memory. A short history of submissions is stored in your
browser's localStorage on your own device only; it is never
transmitted to a server and never shared with anyone. Clearing your browser
data removes it. That history deliberately holds no patient identifiers:
it keeps a confirmation number, the payer, the risk score and a timestamp,
and nothing that would name a person.
No third-party tracking or analytics. CoAuth loads no
advertising, no analytics scripts, and no external trackers. The read-only
API endpoints only return fictional seed data, label it as such with an
X-Content-Classification: fictional-demo-data response header,
and do not log request contents for identification.
Because the project is open source under the MIT license, you can verify all of the above in the source repository. Questions? See Contact.