top of page
Medilis.ai logo (1).png
aa0ff5_00cc2f18bf4a498598db0f56edd74044~mv2.png

Medilis CRE Connector Browser Extension Privacy Policy

Last updated: June 17, 2026

Medilis Systems Ltd. (“Medilis”, “we”, “our”, or “us”) respects user privacy and is committed to protecting information handled through the Medilis CRE Connector browser extension.

This Privacy Policy explains how the Medilis CRE Connector browser extension handles information when used with Medilis Clinical Reporting Engine, approved Medilis workflow environments, supported browser tabs, and approved desktop workflow components.

1. Purpose of the Extension

Medilis CRE Connector is a browser extension designed to support authorized clinical reporting, dictation, documentation, Image AI, and workflow automation activities.

The extension may support workflows such as:

  • Connecting browser-based Medilis CRE workflows with approved desktop-side actions

  • Dictation and clinical reporting workflow support

  • Image AI workflow access

  • User-initiated insertion of finalized report text into selected desktop EMR, RIS, PACS, or reporting windows

  • Interaction with active or selected browser tabs when required for an approved workflow action

  • Browser-based workflow support, documentation, or recording workflows where enabled by the organization

When required, the extension may communicate with the approved Medilis Desktop Agent installed on the user’s Windows or macOS device through browser native messaging. The Desktop Agent is a separately installed native companion application used only for authorized desktop-side workflow actions.

The extension is intended for authorized Medilis customers, healthcare organizations, radiologists, clinicians, and support teams.

2. Approved and Supported Environments

The extension is intended to operate with approved Medilis workflow environments, including but not limited to:

  • cre.medilis.ai

  • app.medilis.ai

  • testapp.medilis.ai

  • Other approved Medilis, RadsforVets, or customer workflow environments configured by Medilis

The extension may also interact with the active or selected browser tab when the user initiates an approved workflow action, such as recording, documentation, copying, inserting text, or connecting a browser workflow with a desktop clinical system.

The extension does not monitor general browsing activity and is not intended to access unrelated websites outside of an approved or user-initiated workflow.

3. Information the Extension May Handle

The extension does not intentionally collect patient identifying information as a standalone data category.

However, when an authorized user initiates a workflow involving a selected browser tab, screen, clinical workflow page, or reporting environment, the extension may handle the content visible in that selected workflow context. Depending on the organization’s workflow and configuration, such content may include clinical, health-related, or workflow-related information.

Information handled by the extension may include:

  • Clinical report text

  • Health-related clinical content entered or processed by authorized users

  • Website content from approved Medilis, RadsforVets, customer, or user-selected workflow pages

  • Browser tab information required to identify or connect the active workflow tab

  • User actions related to extension workflow functions

  • Workflow status, connection status, and local extension settings

  • Recording or documentation output when the user initiates a supported recording or documentation workflow

The extension does not collect financial information, payment information, passwords, authentication credentials, location data, personal communications, or general web browsing history.

4. How Information Is Used

Information handled by the extension is used only for authorized Medilis workflow purposes.

The extension may use information to:

  • Identify the active or selected approved workflow tab

  • Coordinate user-initiated actions between a browser tab and the Medilis Desktop Agent

  • Support dictation, Image AI, reporting, documentation, and recording workflows where enabled

  • Insert finalized CRE report text into a selected desktop EMR, RIS, PACS, or reporting window

  • Return workflow status or generated output to the correct approved page or selected browser tab

  • Maintain local extension settings, workflow state, and connection status

The extension does not use data for advertising, profiling, creditworthiness, lending, or unrelated purposes.

5. Browser Tabs and Website Content

The extension may request browser tab permissions in order to identify the active tab, open or communicate with approved workflow tabs, and connect user-initiated extension actions to the correct browser page.

Where supported workflows require interaction with a browser tab, the extension may access website content from that tab only as needed to complete the user-initiated action.

The extension does not collect or store a general list of websites visited by the user and does not monitor browsing history.

6. Native Messaging and Desktop Agent

The extension may communicate with the approved Medilis Desktop Agent through browser native messaging.

The Medilis Desktop Agent may support user-initiated desktop workflow actions, such as detecting open Windows or macOS application windows and inserting finalized report text into the selected clinical application window after the user completes a workflow action.

The Desktop Agent is not remote code loaded by the extension. It is a separately installed native companion application.

7. Remote Code

The extension does not use remote code.

All extension JavaScript, HTML, CSS, and packaged assets are included inside the extension package. The extension does not load or execute external scripts, remote modules, remote WebAssembly, or code through eval().

8. Data Sharing and Transfers

Medilis Systems Ltd. does not sell user data.

The extension does not transfer user data to third parties except where required to provide the approved Medilis service, support authorized healthcare workflows, comply with customer agreements, or meet legal and regulatory obligations.

Any data handled through Medilis systems is processed in accordance with applicable agreements between Medilis and its customers.

9. Data Retention

The extension may store limited local settings required for operation, such as selected environment, connection status, workflow state, and user interface preferences.

Clinical report content, workflow content, recordings, or documentation outputs are handled only as part of the authorized Medilis workflow. Data retention for such content is governed by the configuration of the Medilis platform and the applicable agreement with the healthcare organization.

10. Security

Medilis applies reasonable technical and organizational measures to protect information handled through its systems and extensions.

Access to Medilis workflows is limited to authorized users and organizations.

11. User Rights and Requests

Users who access Medilis workflows through a healthcare organization should contact their organization for privacy or data-related requests connected to clinical workflow data.

For questions about this extension or this Privacy Policy, users may also contact Medilis Systems Ltd. using the contact details below.

12. Changes to This Privacy Policy

Medilis may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

13. Contact

For privacy questions or support, please contact:

Medilis Systems Ltd.

Email: contact@medilis.ai

Website: https://www.medilis.ai

bottom of page