.env.example

# ─────────────────────────────────────────────────────────────────────────────
# .env.example — Copy this file to .env and fill in your values.
# NEVER commit .env to version control. It is already in .gitignore.
# ─────────────────────────────────────────────────────────────────────────────

# ╔══════════════════════════════════════════════════════════════════════════╗
# ║  HIPAA / PII WARNING                                                    ║
# ║                                                                          ║
# ║  If your corpus contains Medicaid SPAs or any other documents that      ║
# ║  include Protected Health Information (PHI) or Personally Identifiable  ║
# ║  Information (PII), you must:                                            ║
# ║                                                                          ║
# ║  1. NEVER store credentials, API keys, or connection strings in any     ║
# ║     file that is tracked in version control.                            ║
# ║                                                                          ║
# ║  2. NEVER ingest raw documents containing PHI/PII into a public or      ║
# ║     unencrypted storage location. data/raw/ and data/parsed/ are        ║
# ║     gitignored but are NOT encrypted on disk by default.                ║
# ║                                                                          ║
# ║  3. Ensure any cloud service used (e.g., Cloudflare AutoRAG) is         ║
# ║     covered by a Business Associate Agreement (BAA) before uploading    ║
# ║     documents that contain PHI.                                          ║
# ║                                                                          ║
# ║  4. Consult your institution's IRB and HIPAA compliance office before   ║
# ║     running this pipeline on data subject to HIPAA Safe Harbor or       ║
# ║     Expert Determination standards.                                      ║
# ║                                                                          ║
# ║  Medicaid SPAs are generally public administrative records and do not   ║
# ║  contain individual patient data. However, supplemental data files,     ║
# ║  exhibits, or attachments included with SPAs may. Verify before         ║
# ║  ingesting.                                                              ║
# ╚══════════════════════════════════════════════════════════════════════════╝

# ── Cloudflare AutoRAG (optional) ─────────────────────────────────────────
# Required only if you use scripts that upload to Cloudflare Workers AI / AutoRAG.
CLOUDFLARE_ACCOUNT_ID=
CLOUDFLARE_API_TOKEN=

# ── Other API keys (add as needed) ────────────────────────────────────────
# OPENAI_API_KEY=
# ANTHROPIC_API_KEY=