Security and privacy at Capnolog
End-to-end encrypted. Never include patient identifiers (name, MRN, DOB) — this app is zero-PHI.
This note is for you only. The note is NEVER exported to ACGME or included in any CSV.
Got itThe app is built to hold no protected health information. There is no field for a name, an MRN, or a birthday. Speech and text parsing run on the phone. Capnolog makes no compliance representation and offers no business associate agreement. Your institution's policy governs what you may enter.
Your cases stay on your phone.
Encrypted at rest, behind Face ID. Deleted cases purge after 30 days.
What leaves the phone, and when.
Your iPhone
Your iCloudOn by default, one switch
An encrypted backup only you can read
CapnologOn by default, each its own switch
De-identified cases, usage, and crash reports
Patient nameMRNBirth dateYour noteACGMEOnly when you press Submit
The case you file
Where you send itFrom the share sheet
A CSV or PDF export
The extension never presses Submit.
The extension prefills the ACGME anesthesiology form in your browser and never touches your password.
Case date
Procedure
Your role
Case type
Attending
This case
- Case date · 2026-09-02read back
- Procedure · General Maintenanceset, not read back
- Your role · Primaryread back
- Case type · Non-traumaset, not read back
Attending
Nothing set — no option matched cleanly. Pick the field yourself.
Press Submit in ACGME. Capnolog marks this case filed once ACGME confirms the submission.
Already logged that case?
Report a security issue
Email support@capnolog.com with “Security report” in the subject.
Capnolog acknowledges a report within two business days and triages within 24 hours of confirming a real issue. Capnolog will not pursue a good-faith researcher who stays inside their own accounts and data and avoids privacy violations and service disruption. The researcher must allow a reasonable time to fix before disclosing.