PHI firewall and the outbound deliveries log

Telehealth brands need ad signal without handing health details to ad platforms. Kalman's PHI firewall builds every outbound payload from an allowlist. It never starts from a full event and strips fields out. Each allowed field is read, checked for format and copied. Nothing else can leave.

What can go to Meta

• The event name, time and id, and the action source.
• The event source URL, which is your site root only and never a path.
• Hashed identifiers: email, phone, external id, zip, city, state and country.
• Meta's click and browser ids.
• Value and currency.

IP address and user agent are included only if you turn that on for the destination. Custom event names, and event ids from your systems, are checked against a denylist of condition and medication terms and against your brand's own terms. Product names never go to ad platforms.

The deliveries log

The Events log has two tabs:

• Events lists what Kalman received: event name, source, time, value and a short visitor id. It shows no names, emails or answers.
• Deliveries lists each outbound delivery with its status, attempts and the platform's response. You can open any delivery to see the exact body the firewall built.

Your team can check what left Kalman, event by event, instead of taking it on trust.

Read the guide