Individual Access Service and TEFCA
Prolaio’s Individual Access Service (IAS) is a secure digital service that lets individuals request their health records from connected hospitals, clinics, and health systems, then routes that information into a structured, useful view.
The Prolaio IAS Portal lets you request your health information from others who participate in a data sharing framework called the Trusted Exchange Framework and Common Agreement (TEFCA). Prolaio does not charge fees for IAS. If you wish to register for our Individual Access Services (IAS) through TEFCA, please contact support@prolaio.com. If you are registering for IAS in order to direct that a copy of your records be sent to a clinical trial, please complete registration through that trial's enrollment workflow instead.
Before signing up for IAS, please read our TEFCA Privacy and Security Notice. We will also request your consent to participate in IAS through TEFCA. Your consent is voluntary. However, you cannot use IAS on TEFCA without consenting first. You can download a copy of our IAS consent here.
Read the Full TEFCA Privacy and Security Notice
Our IAS Provider Status
REQUEST-ONLY IAS PROVIDER: PROLAIO DOES NOT PROVIDE BIDIRECTIONAL SERVICES.
PROLAIO DOES NOT PROVIDE BIDIRECTIONAL SERVICES. YOU WILL HAVE THE ABILITY TO REQUEST ACCESS TO YOUR HEALTH INFORMATION VIA TEFCA EXCHANGE. YOU WILL NOT BE ABLE TO USE PROLAIO TO SHARE YOUR HEALTH INFORMATION WITH OTHER PARTICIPANTS IN TEFCA.
Our Privacy Commitments at a Glance
✔️ Your Consent
We ask for your express, documented consent before sharing your data through TEFCA.
✖️ No Sale of Data
We do not sell your information or use it for targeted advertising or marketing.
🔄 Minimal Use
We collect and use only what's necessary to provide your requested access.
⏯️ You're in Control
You can revoke consent, access, export, or request deletion of your information at any time.
How to Revoke Your IAS Consent
If you registered via the Prolaio IAS Portal and want to remove your consent at any time, please follow these instructions.
Step-by-Step: Revoking Consent in the Prolaio IAS Portal
- Step 1: Log in to your account and go to Profile tab
- Step 2: Click on the “Remove My Info” at the bottom right of your profile page.
- Step 3: You will be prompted to confirm your request. Once you confirm, click “Delete My Info”. This process will direct Prolaio to delete all information housed within the platform AND to revoke Prolaio’s authorization to request health information.
Your Individual Rights
As an IAS user, you have the following rights regarding your Individually Identifiable Information:
- Right to Access – You may access and view the Individually Identifiable Information we maintain in connection with your use of IAS.
- Right to Export – You may request an export of your Individually Identifiable Information in a machine-readable format, including the information necessary to interpret that format.
- Right to Deletion – You may request that we delete your Individually Identifiable Information to the extent technically feasible and not prohibited by law. This does not apply to audit logs or records we must keep for legal, contract, or policy compliance.
- Right to Be Notified of Incidents – If your information is reasonably believed to have been affected by an IAS Incident, we will notify you without unreasonable delay and no later than sixty (60) days following our discovery of the incident.
- Right to Revoke Consent – You may revoke your IAS Consent at any time through the Platform or by contacting us as described above. After you revoke, you will no longer be able to use our IAS.
- Right to Opt Out – You may opt out of having us share your health information through TEFCA. As a Request-Only IAS Provider, we do not currently share your health information in response to TEFCA requests from others.
To exercise any of these rights:
- Email support@prolaio.com with your name, the email address associated with your Prolaio IAS account, your phone number, and a short description of what you want (access, export, deletion, or revocation of consent).
We will respond within a reasonable time. If the law prevents us from fulfilling your request, we will notify you.
How We Participate in TEFCA
Prolaio participates in TEFCA solely to provide Individual Access Services (IAS). All TEFCA exchanges we conduct use the T-IAS Exchange Purpose Code. As a Request-Only IAS Provider, we do not offer bidirectional services. We make TEFCA disclosures of your information only as permitted or required by TEFCA and applicable law.
How We Protect Your Information
We use commercially reasonable administrative, technical, and physical safeguards to protect your Individually Identifiable Information, including encryption of your information in transit and at rest. We require any service providers who access your information on our behalf to maintain similar privacy and security protections.
Questions of Concerns
If you have questions, concerns, or complaints about this or our privacy practices, please contact us:
- Email: privacy@prolaio.com
- Telephone: (855) 869-9054
- Mail: Attention: Chief Privacy Officer, Prolaio, Inc., 230 West Monroe, Suite 2560, Chicago, IL 60606
For the complete TEFCA Privacy and Security Notice, including our full data retention and government request disclosures, please see the link below.