EZAppeal

EZAppeal is a multi-tenant SaaS platform that generates insurance appeal
letters and prior authorization requests for U.S. healthcare providers,
billing companies, and law firms.

Service Architecture

A React single-page application served via Vercel (CDN/edge) and a Node.js
/Express backend hosted on Railway (AWS-backed U.S. infrastructure).
PostgreSQL stores account metadata, anonymized usage telemetry, and
executed Business Associate Agreements — no clinical content is persisted.
AI inference runs exclusively on AWS Bedrock under an executed BAA,
in U.S. regions only.

Data Handling

Users submit denial letters and clinical notes through the authenticated web
interface. The platform processes documents in real time and returns
generated correspondence in seconds. Protected health information exists
only in transient memory during inference — no PHI is persisted at rest.
Audit logs record document-generation events with anonymized metadata only
(payer, procedure code, criteria-match metrics).

Assessment Scope

This CAIQ self-assessment covers the EZAppeal web application, REST API,
authentication, Stripe payments integration, and the AWS Bedrock inference
pipeline. Infrastructure controls inherited from AWS, Railway, Vercel, and
Stripe are identified as third-party outsourced where applicable. A
Business Associate Agreement is executed with every customer before
platform access is granted.