10decodersOne secure link, zero portal logins for clinical review
A leading U.S. supplier of home-delivered urologic and ostomy products needed to share AI-verified clinical orders with outside physicians, payers and billing auditors without emailing PHI. 10Decoders built a token-gated, zero-footprint viewer that opens any order and its extracted data in under a second from a single expiring link.
Overview
Extraction was fast. Sharing was the bottleneck.
The client's AI pipeline already read incoming faxes, prescriptions and medical records in seconds, checking signatures, 90-day supply boxes and diagnosis-to-product matches. The slow part came next: getting that verified document in front of physicians, discharge planners, payers and auditors who had no account on the internal platform.
The old options were emailing PDFs or forcing outside reviewers through portal sign-ups. 10Decoders replaced both with a signed, expiring hyperlink that opens the original document and its AI-extracted data side by side, logs every view, and leaves nothing behind on the reviewer's device.
Under the Hood
Built on verifiable security, not trust
Signed Tokens
Every link carries a signed token checked against server secrets; any tampering is rejected.
Scoped Access
Tokens embed the document ID and expiry, so a link opens one order and nothing else.
Self-Closing Links
Links expire automatically after a set window, closing the exposure window without manual cleanup.
Zero Local Footprint
Documents stream into memory only; nothing is cached, stored or written to the viewer's device.
Federated Staff Access
Internal staff sign in through enterprise SSO and Active Directory; partners use token-only access.
Full Traceability
Token creation, clicks, PDF views and JSON exports are logged with time, IP and document ID.
Doctors won't manage another password, and PHI can't ride in an email.
The Challenge
- Verified orders were shared as unencrypted PDF email attachments.
- Outside clinicians refused to create and remember yet another portal login.
- Exported PDFs lost their link to the AI-extracted data and signature checks.
- Shared copies had no expiry and no record of who opened them.
Our Approach
- Replace attachments with signed, tokenized hyperlinks generated by the pipeline.
- Make access one click on any browser or phone, with no account or VPN.
- Show the original document and extracted data together in one synced viewer.
- Expire every link automatically and log every view for HIPAA audits.
The Approach
The Solution
As soon as the pipeline finishes an order, it generates a unique URL carrying a signed token with the file ID and an expiry time. The link goes out in the automated processing report. When an authorised reviewer clicks it, the server validates the token and renders the full view in under a second.
The reviewer sees the original multi-page PDF on one side and the structured data on the other: patient details, clinician orders and compliance tags. Clicking any field jumps the PDF to the exact page and spot it came from, so a physician or auditor can confirm an order without hunting through the file.
Document + Extracted Data
Original PDF and AI-verified fields on one screen.
Click-to-Source Navigation
Any field or signature card scrolls the PDF to its exact location.
Page-Wise Signature Checks
SIGNED badges, 90-day supply status, handwriting and out-of-box signature alerts.
Category View & JSON View
Readable layout for operations staff, one-click JSON for billing and integration teams.
How It Fits Together
From processed fax to verified review
AI Document Pipeline
Extracts clinical data, signatures and checkbox status from each incoming order.
Token-Gated Link Service
Signs a short-lived token with file ID and expiry, then embeds it in a unique URL.
Instant Interactive Viewer
Validates the token and renders document plus data in under a second, logging the view.
Why It Works
Security that removes friction instead of adding it
One Click, Any Device
Reviewers open orders on a desktop, tablet or phone with no software, login or VPN.
Links That Close Themselves
Automatic expiry means no shared copy stays open after the review window passes.
Data Next to Proof
Extracted values sit beside the clinician signature and checkbox that justify them.
Tamper-Proof Tokens
HMAC signatures mean an edited or forged link is rejected before anything renders.
Every View on Record
Each click, view and export is logged with time, IP and document ID for HIPAA review.
Built as a Platform Service
Runs as a native microservice inside the 10Decoders Document AI Accelerator.
What We Built
Four parts, one secure workflow
Token Generation Service
Signs HMAC tokens with file ID and expiry for every processed order and embeds them in unique URLs.
Zero-Footprint Viewer
Server-rendered HTML viewer that streams document and data into memory and loads in under 800 ms.
Synced Compliance Layout
Page-wise signature, supply-checkbox and handwriting cards linked to exact positions in the PDF.
Access & Audit Layer
SSO federation for staff, token-only access for partners, and a full HIPAA-ready event log.
The Shift
What changed for the team
No More PHI by Email
Emailing raw medical PDFs to outside reviewers was eliminated entirely.
Zero Credential Overhead
No external portal accounts to provision, reset or support.
Sub-Second Load Times
Full document and extraction views render in under 800 milliseconds.
Days Down to Minutes
Orders that once waited days on outside verification can clear for shipment in minutes.
Audit-Ready by Default
Every fulfilment decision is backed by a logged, human-verifiable signature view.
Works on Every Screen
Responsive layout runs cleanly on workstations, tablets and clinical mobile devices.
Delivery, Security & IP
Production-grade from day one
Delivery Quality
- Live in production, serving external review links for clinician orders and AI extraction results.
- Embedded directly into the existing AI document processing pipeline.
- Links delivered automatically through API-driven process reports.
Security & Compliance
- HMAC-SHA256 token verification with automatic time-to-live expiry.
- No caching, local storage or files written to the reviewer's device.
- Timestamped access log with IP and document ID for HIPAA audit trails.
IP & Reusability
- Token-gating and zero-footprint viewing built as a reusable framework.
- Runs as a native microservice in the 10Decoders Document AI Accelerator.
- Ready to extend to annotations, role-based masking and one-tap reorders.
The Outcome
Built for everyone in the review chain
Review in One Click
Open an order on any device and confirm it without a login, download or VPN.
Faster Order Clearance
Verification no longer stalls in email threads or portal queues, so supplies ship sooner.
Defensible Every Time
Each decision links to the signed source document and a logged access record.
