How it works · Security

What happens to patient data.

Your compliance team is going to ask. Here’s exactly what we do today, and what’s still planned.

What we do today, and what’s planned

On-device processing

We use optimized on-device models in the context of your data layer, running transcription today. Data isn’t sent to third-party processing servers, and you avoid connectivity headaches.

HIPAA compliant and secure cloud management

HIPAA compliant, battle tested and ready for your practice.

BAA with you

We sign a BAA with every practice and hospital.

SOC 2 Type I

Planned for 2027.

Your governance

Research use still goes through your own data use agreements (DUAs) and your IRB.

Cybersecurity is top priority

Systematic versioning and encryption keep our cybersecurity rock solid, with third-party auditing (SOC 2) planned for 2027.

Questions from your security team?

Send them our way and we’ll answer them.