Transient processing, no server-side storage

Medical bills you submit are processed in real time and are not retained on our servers. The analysis happens transiently, and the resulting report lives in your browser. We do not maintain a server-side archive of uploaded bills or the protected health information they may contain.

Encryption in transit

Traffic between your browser and BillXM is encrypted in transit using HTTPS/TLS. Data exchanged with our subprocessors is likewise transmitted over encrypted connections.

Least-data principle

We aim to collect and keep only what is necessary to run the service. We store your email address for account and usage purposes and keep anonymized, aggregate counters for operating the product. We do not retain uploaded bills.

Subprocessors

We rely on a small set of reputable providers to operate BillXM:

• Anthropic — AI analysis via the Anthropic API (Claude models).
• Stripe — payment processing. BillXM does not store your full card details.
• Vercel — application hosting and delivery.

Responsible disclosure

If you believe you have found a security vulnerability in BillXM, please report it to us at info@billxm.com. We ask that you give us a reasonable opportunity to investigate and address the issue before disclosing it publicly, and that you avoid accessing or modifying data that is not your own.

No warranty

No system can be guaranteed to be completely secure. While we take reasonable measures to protect your data, we do not warrant that the service will be free of vulnerabilities or that security incidents will never occur.

Contact

Security questions can be sent to info@billxm.com. BillXM LLC is located in Houston, Texas.