Digitally Verified Clinical Reports: How Brauni Protects Your Professional Reports

As a psychologist, clinical reports are an essential part of your practice. You order them for health insurance, you need them for referrals, they request them from courts or educational institutions. The problem is that a common PDF offers no guarantee: anyone can edit it, modify a date, change a diagnosis, or even invent a full report.

How can a health insurance, a judge or an institution know that the report they received is authentic and not altered? That is the problem we solve.

In Brauni, each clinical report you generate is cryptographically protected and has a digital verification system that allows any third party to check its authenticity in seconds.

What a clinical report is in Brauni

In Brauni you can create clinical reports directly from the platform, associated with a specific patient. The editor allows you to write the content in enriched format: titles, lists, bolds, tables and everything you need for a professional report.

When you finish writing, you can download the report as PDF ready to print or send. But this is not just any PDF.

An PDF with its own identity

Each report you generate in Brauni automatically includes:

• A single verification code (such as a fingerprint of the document)
• The name of the professional who issued it
• The date of issue
• A verification URL where anyone can check the authenticity
• The legend "Digitally Verified Document" on each page

This footer appears on all pages of the PDF, not just on the first page. It is impossible to separate a sheet from the report without noting the lack of verification.

Cryptographic protection: how each report is protected

The protection of your reports works in two complementary layers:

Content encryption (rest data)

The title and contents of each report are encrypted with AES-128 in CBC mode with HMAC authentication (Fernet encryption) before being saved to the database. This means that even if someone accessed the database directly, they would see incomprehensible text strings. Without the encryption key, the content is unreadable.

Cryptographic Hash (document integrity)

When you download the PDF, the system calculates a SHA-256 hash on the generated file. This hash is a unique string of 64 characters that works as a fingerprint of the document.

What does this mean? If someone modifies even one character, a comma, or space in the PDF, the hash changes completely. It is mathematically impossible to alter the document without verification detecting it.

The verification code: your seal of authenticity

Each report receives a single verification code at the time of its creation. This code is a universal identifier (UUID) that is never repeated.

This code is printed on the footer of each PDF page along with a verification URL. When you deliver a report to a health insurance, a court or any institution, that person can:

1. Visit the verification URL that appears in the document
2. Enter the code or upload the PDF
3. Receive instant confirmation that the document is authentic

It's like a notary stamp, but digital, automatic and verifiable 24 hours of the day.

Public verification: anyone can verify authenticity

Brauni offers a public verification portal that does not require account or login. It works like this:

The hashes comparison is performed with a constant time algorithm (secrets.compare_digest), which means that not even a sophisticated attacker could obtain partial information about the correct hash by timing attacks.

What information is shown in the verification?

This is where privacy becomes critical. When a third party verifies a report, the system never discloses the content of the report or complete personal data. It only shows:

• That the document is and was issued by a professional at Brauni
• The initial of the professional (e.g., "J. D.") - never the full name
• The initial of the patient (e.g., "C. R.") - never the full name
• The date of issue
• Whether the PDF uploaded matches or not with the original

Privacy above all: what is shown and what is not

Public verification is designed with the principle of minimum data exposure. Compare:

This means that if someone finds a loose verification code, they cannot use it to obtain clinical information. They can only verify an PDF already in their possession.

Use cases: when you need a verifiable report

health insurance and private health plans

When health insurance asks for a report to authorize sessions or treatments, they need to know that the document is legitimate. With Brauni, they can verify it in seconds without calling you.

Courts and expertise

In legal contexts, the authenticity of a clinical report is critical. A Brauni report includes cryptographic protection that demonstrates that it has not been altered since its issuance. The verification code works as additional evidence of authenticity.

Educational institutions

When a patient needs a report to present at a school or university, the institution can verify that the document is genuine without having to contact the professional.

Referrals to other professionals

By referring a patient to a psychiatrist, neurologist or other professional, you can share the report with the peace of mind that the recipient can verify its authenticity.

Complete audit: each action is recorded

Each operation on a report is recorded in an unchangeable audit log:

• Creation: who created the report, for what patient, when
• Reading: who agreed to the report and when
• Modification: who edited the report (and the hash is automatically invalidated)
• PDF download: who downloaded the PDF and when
• Elimination: who deleted the report

This traceability is essential to comply with health data protection regulations. You will always be able to show who did what and when.

Paper vs Digital: Why Verifiable Digital Reports Are the Future

How to create and share a report in Brauni

The process is simple:

1. Select a patient from your panel
2. Create a new report with rich text editor
3. Read the content in the format you need
4. Download the PDF -Automatically includes the verification watermark, unique code and cryptographic hash
5. I shared the PDF by email, WhatsApp or print it. The receiver can verify the authenticity at any time

You don't need to do anything extra. Cryptographic protection, verification code, and auditing apply automatically to every report you create.

Additional security that protects your reports

In addition to digital verification, each report has additional technical protections:

• Anti-XSS Validation: Report content is sanitized to prevent malicious code injection
• SSRF protection: PDF generator blocks any attempt to load external resources, preventing network attacks
• Size Limits: PDFs have a 20 MB limit to prevent denial of service attacks
• Validation of ownership: Only you can access your patients' reports. No other professional can view, edit or download your reports.

A professional standard for your practice

Clinical reports are documents that transcend your clinical practice. They read health insurance, judges, institutions and other professionals. That these documents have digital verification is not a luxury: it is a standard of professionalism that protects both you and your patients.

With Brauni, every report you issue bears your name backed by cryptography. Verifiable. Unchangeable. Professional. Everything included in it is in verifiable reports.

---

Reports generated in Brauni comply with the principles of Argentina's Personal Data Protection Act 25.326. Clinical content is encrypted at rest and protected with SHA-256 cryptographic verification.