Updated October 2026
Shfa.ai: licensing a practice's data, and what to verify
Shfa.ai targets medical practices and facilities. It says facilities have been paid $300,000 to $3,000,000 for their data, that it paid one healthcare customer $943,000, and that all 18 HIPAA identifiers are removed so no patient-identifying information reaches a lab. Its privacy policy and terms name no legal entity, address or phone.1,2,3
Its legal pages name no legal entity, address, email or phone.3
Key facts
Shfa.ai in its own words and others'
| Fact | Value and source |
|---|---|
| Shfa.ai site claims | Medical facilities paid $300,000 to $3,000,000 for their data; $943,000 paid to a single healthcare customer; cash upfront, royalties or both |
| Shfa.ai ads | Meta ads from 2026-09-09 to healthcare practices and facilities: "free data appraisal"; says it removes all 18 HIPAA identifiers |
| Shfa.ai named partners | Says John Snow Labs helps complete and verify de-identification and Pillsbury Law advises on legal structure; names Emiliano Mankolli, PhD, as head of AI research |
| Shfa.ai domain | shfa.ai was registered on 2025-05-29 |
Its claims
The payouts Shfa.ai cites
The site cites $943,000 paid to a single healthcare customer and a range of $300,000 to $3,000,000, payable as cash upfront, royalties or both. Its ads, which began on 2026-09-09, also cite a $1.2M payment that does not appear on the site. Its terms say any dollar figure on the site is representative, not a forecast.1,4
Patient identifiers
Who it says removes patient identifiers
Shfa.ai says John Snow Labs works with it to remove and verify the removal of patient identifiers, that Pillsbury Law advises on the legal structure, and that independent expert-determination firms review the final dataset for re-identification risk. These are Shfa.ai's own statements; we found no confirmation from either firm. It names one person, Emiliano Mankolli, PhD, as head of AI research.5
In healthcare, who certifies that patients cannot be identified matters as much as the price. Ask for the named expert's written determination before any record leaves the practice.2
Company details
What the site does not say
Check first
How to check Shfa.ai, or any buyer
The same checks for every company we profile. We state facts; you decide.
- 1.Find the company behind the ad: a legal name, a registered address and named people.
- 2.Ask for a written offer and a sample agreement before you send any data.
- 3.Ask who removes personal data, by what method, and approve it before anything is exported.
- 4.Ask which AI labs will receive the data, and whether you will be told.
- 5.Ask how they are paid: by you, by the buyer, or from a share of your deal.
- 6.Get terms from at least one other buyer before you answer.
FAQ
Questions, answered with sources
It says John Snow Labs works with it on removing patient identifiers and independent expert-determination firms review the result. Neither claim was confirmed by the firms.5
We do not answer legal questions. Ask the licensing company: their team reviews this with you before anything is signed.
Before you sign
Legal questions go to the licensing company
We do not answer legal questions. Ask the licensing company before you sign: their team reviews these with you.
Questions for this kind of business
- Who signs the expert determination, and will we receive it before any data leaves?
- How do CCPA, GDPR, UK GDPR and state privacy laws apply, and is de-identified data still personal information?
- Do professional rules apply (AICPA, IRC 7216, HIPAA, ABA Model Rule 1.17, insurance agency contracts, adviser rules, state boards)?
Questions for any buyer
- Is the license exclusive, and for how long?
- Can you sublicense the data, and to whom?
- Which AI labs will receive it, and will you tell us?
- How long do you keep it, and how is it deleted?
- What is your liability cap, and who indemnifies whom?
- Will the contract ban re-identification of people in the data?
- Who removes personal data, by what method, and do we approve it first?