Digital Pathology

The slide contains
the diagnosis.
The label contains
the patient.

SlideIQ de-identifies whole-slide images at three surfaces simultaneously - TIFF metadata, embedded label images, and LIMS barcodes - before any WSI file reaches an AI model or research pipeline.

3
PHI surfaces
WSI
Native format
6+
Scanner vendors
Zero
Raw PHI shipped
SlideIQ · WSI processing stream
Imaging metadata fields
Image descriptionstrippedstripped
Imaging softwarepreservedretained
Capture timestamppreservedretained
Scanner makepreservedretained
Patient namestrippedstripped
Specimen accessionstrippedstripped
Scanner identifierpseudonymisedpseudonymised
Label image surface
MACRO IMAGE · PHI detected in label region
redacting
The problem

Everyone de-identifies the tile.
Nobody de-identifies the label.

Whole-slide imaging carries patient identity in three distinct locations. TIFF metadata headers are the most visible - but the embedded macro image (which includes the physical slide label, often hand-written or barcoded) and LIMS integration fields are routinely missed by standard de-identification pipelines.

Typical WSI de-identification coverage
Imaging metadata headers
Patient name, specimen identifier, scanner metadata
covered
Embedded label image (macro)
Physical slide label - often contains handwritten PHI
missed
LIMS barcode in label region
Lab system reference linking to patient record
missed
Scanner vendor-specific tags
Scanner fields not in standard imaging spec
missed
Tile-level pixel data
Tissue image - does not contain PHI
covered
What SlideIQ covers

Three surfaces. One pipeline.

SlideIQ processes every location where patient identity can survive standard TIFF export.

01

Imaging metadata & vendor headers

Comprehensive imaging metadata de-identification across embedded headers, namespace fields and scanner-specific vendor fields. Configurable retain / remove / pseudonymise per field.

Standard WSI headersEmbedded metadataVendor proprietary fieldsScanner profile dataConfigurable per format
02

Label image redaction

The macro region of a WSI contains a photograph of the physical slide - including the label, which often shows patient name, barcode, or handwritten notes. SlideIQ automatically detects and removes this region across major WSI formats.

Macro image regionLabel detectionBarcode region removalHandwritten text
03

LIMS barcode unlinking

Barcodes embedded in slide labels link back to LIMS patient records. SlideIQ pseudonymises or removes barcode values, replacing them with a consistent study-level token that preserves research cohort integrity without retaining the original reference.

Barcode pseudonymisationLIMS reference removalConsistent study tokenCohort integrity
How it works

The SlideIQ pipeline.

01
WSI Ingest
Whole-slide image received from scanner or LIS via file drop, API, or SFTP
02
Metadata Scrub
Imaging metadata and vendor-specific fields processed per profile
03
Label Detection
Automated detection identifies macro label region and confirms PHI. Region removed.
04
Policy Check
Routing rules validated. Recipient allowlist enforced. Research DUA verified.
05
Clean Output
De-identified WSI forwarded. Tamper-evident ledger entry written.
Technical specifications

Built for every major scanner vendor.

SlideIQ handles all major WSI formats natively, including proprietary variants. No format conversion required before de-identification.

Supported formats
Standard WSI formats · major vendor scanner outputs
Metadata surfaces
Imaging headers · embedded metadata · vendor-specific tags
Label detection
Automated label-region detection across major WSI formats
Throughput
Real-time · tile processing async
Deployment
On-prem agent · LIS / scanner direct integration · S3-compatible storage output
Audit format
Tamper-evident audit format · HREC exportable
Compliance
OAIC APP 11, NPAAC standards, ISO 15189

SlideIQ is in development.

Join the waitlist and we will reach out when early access opens. Pathology labs and research institutions go first.