Privacy handling, the medical-code dictionary, the API and what it costs.
How is client and borrower data protected before it reaches an AI model?
Personal identifiers are replaced with opaque tokens before any text is sent to a model, and restored only on the finished letter. The detector covers ten identifier types — email address, phone number, Social Security number, person name, date of birth, street address, credit card, medical record number, driver’s licence and account number — plus any unlabelled run of eight or more digits, which catches loan, reference and claim numbers that carry no obvious label. If the scrub cannot be verified clean, the request is rejected with a 422 rather than sent.
- The token map is never persisted. It lives in memory for the duration of a single request and is used to re-identify the finished letter, then discarded.
- Money, dates and percentages are deliberately not tokenised. They have to survive intact, or the audit pass could not do arithmetic on them — which is the whole point of the audit.
- The gate fails closed. A residual identifier after the scrub rejects the request. It does not warn and proceed.
Stated plainly, because the industry tends not to: detection is automated and best-effort. Name and address matching in particular are heuristics, not guarantees. This is not HIPAA de-identification and we do not describe it as such.
Does the platform read CPT and ICD-10 codes in medical records?
It recognises the codes that appear most often in personal-injury records and translates them into plain English inside the letter: 36 CPT procedure codes and 24 ICD-10 diagnosis code families. Diagnosis matching is by code prefix, so a record showing S13.4XXA resolves to a sprain of the cervical spine — whiplash. Recognised codes are injected into the drafting prompt with their meanings attached.
Coverage is curated to what personal-injury treatment actually looks like: emergency department and office visits, CT, MRI and X-ray imaging, physical therapy, chiropractic care, trigger-point, epidural and facet injections, and the common surgical repairs — meniscectomy, rotator cuff repair, microdiscectomy, cervical fusion and total knee arthroplasty.
This is not full CPT or ICD-10 coverage, not a licensed code set, and not a billing source of truth. Descriptions are general references for drafting, and ICD-10 seventh characters can change the specifics of a diagnosis.
Is there an API?
Yes. Five POST endpoints — demand letters, case value, negotiation, future medical and mortgage demand — authenticated with a dl_-prefixed API key sent as either an Authorization: Bearer header or an X-API-Key header. The specification is published as OpenAPI 3.1 at /api/v1/openapi.json. There is no SDK, no OAuth flow and no GET or list endpoints: five generation endpoints, JSON only.
| Limit or behaviour | Value |
|---|
| Rate limit | 50 generations per hour per key across all v1 endpoints, or the key’s own hourly, daily or monthly limit — whichever is lower |
| On 429 | A Retry-After header is returned |
| Max input | documentsText is capped at 800,000 characters |
| Error shape | A uniform { error, message } envelope on 400, 401, 403, 429 and 500 |
| 422 | Returned specifically when the PII scrub could not be verified complete |
| Every response | Carries a piiProtected boolean reporting whether anything was tokenised for that request |
Full endpoint reference and request examples are on the API documentation page. API access is included from the Professional plan upward.
How much does DemandAI Pro cost?
The free trial runs 14 days and requires no credit card. Paid plans are $127 a month for Starter with 10 letters a month, $247 for Professional with 50 letters a month and public REST API access, and $397 for Business with 100 letters a month. Litigation financing reports are included with Professional and Business plans, and expert witness recommendations are in beta.
| Plan | Price | Demand letters |
|---|
| Trial | $0 for 14 days | No credit card required |
| Starter | $127 / month | 10 per month |
| Professional | $247 / month | 50 per month, plus API access |
| Business | $397 / month | 100 per month |
Current plan details are on the pricing page.
Can homeowners use it without a lawyer?
Yes — there is a homeowner sign-in and a homeowner-facing letter flow alongside the attorney and servicer front doors. But every output is a draft for review, not a filing and not advice. Mortgage letters close with a mandatory DRAFT — FOR COMPLIANCE AND LEGAL REVIEW ONLY notice, and every limitation-period output carries an explicit general-reference-only disclaimer. For anything contested, a deadline that is close, or a dispute already in litigation, involve a lawyer.
The design assumption throughout is that a competent human reviews the document before it goes anywhere. That is why the platform leaves bracketed placeholders where the source documents are silent, refuses to invent legal authority, and reports its audit result rather than simply asserting the letter is correct.