sagarpritam/healthcare-privacy-firewall
Production-ready Healthcare Privacy Firewall - PHI/PII detection, masking, risk scoring with FastAPI, Presidio, Redis, PostgreSQL, Docker
What's novel
Production-ready Healthcare Privacy Firewall - PHI/PII detection, masking, risk scoring with FastAPI, Presidio, Redis, PostgreSQL, Docker
Code Analysis
14 files read · 4 roundsA FastAPI-based API firewall that intercepts healthcare API payloads, detects PHI/PII using Presidio NLP and custom regex patterns, applies configurable masking strategies, scores risk with weighted multipliers, and enforces HIPAA/PCI-DSS compliance policies with alerting.
Strengths
Excellent separation of concerns with a clean detection→masking→risk→policy pipeline, genuine healthcare domain expertise in the pattern definitions and risk weights, and graceful degradation when optional dependencies (Presidio, Whisper, Redis, PostgreSQL) are unavailable.
Weaknesses
Testing is limited to a single benchmark script rather than a proper pytest suite with assertions and edge cases, and the in-memory rate limiting won't scale across multiple instances. Some regex patterns (e.g., generic 10-digit NPI) will produce high false positive rates.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
6
Contributors
1
Files
64
Active weeks
2
Repository
Language
Python
Stars
1
Forks
0
License
—