SECURITY & TRUST
Where a patient's words go, and when they disappear.
Written for your compliance lead. Everything on this page is something we can show you in writing.
The life of a visit recording
- 01CAPTURE
Recorded in the browser
The clinician records the visit in the ScribeLive web app. When they stop, the recording is uploaded over HTTPS.
- 02DRAFT
Drafted by AI
The recording is sent to Google's Gemini AI, which drafts the SOAP note, suggested ICD-10 codes and the patient summary.
- 03REVIEW
Reviewed by the clinician
The clinician edits, approves and signs the draft. Every view is written to the audit log. A visit nobody signs is never signed automatically: it stays a draft and the office's administrators are told.
- 04DELETE
Deleted at sign-off
Signing the note deletes the recording. An unsigned recording is deleted automatically after 72 hours by default.
What we commit to
- Encrypted clinical records
- Notes, transcripts, codes, prescriptions, summaries and uploaded reports are encrypted in the database.
- Clinic-by-clinic isolation
- Database row-level security keeps each clinic's records separate, on top of the app's own checks.
- A full audit trail
- Every view of patient data, every sign-in and every change is logged, and can be exported.
- Short-lived recordings
- Deleted at sign-off, and automatically within 72 hours (default) if a note is never signed.
- Secure sessions
- HTTPS everywhere, HttpOnly cookies with CSRF protection, 4-hour sessions and rate-limited sign-in.
- Nothing signed for you
- Only a clinician's signature makes a note final. A visit left unsigned stays a draft, and its administrators are flagged.
Request the security packet
Our security overview, data-flow diagram and subprocessor list. Usually sent within one business day.
Security questions
Is ScribeLive HIPAA compliant?
There is no official “HIPAA certification”, for us or anyone else. ScribeLive is built around the HIPAA safeguards: encrypted clinical records, clinic-by-clinic isolation, an audit trail on every view and recordings deleted at sign-off. Compliance is shared with your clinic, so book a call and we'll go through the agreement and the services that handle your data before you go live.
Do you keep recordings of patient visits?
Only until the note is signed. The recording is deleted when the clinician signs the note, and any recording still unsigned is deleted automatically after a set period, 72 hours by default. Clinicians are warned before an unsigned recording expires.
Who can see a draft note?
The treating clinician and the administrators of that office. Other clinics never can: each clinic's records are separated at the database level. Every view of patient data is recorded in the audit log.
How is our clinic's data kept separate from other clinics?
Twice. The database itself enforces row-level security, so a query can only ever return the signed-in clinic's rows, and the application checks the clinic on every request as well.
What is encrypted?
Everything travels over HTTPS. In the database, clinical notes, transcripts, ICD-10 codes, prescriptions, patient summaries and uploaded reports are encrypted with authenticated encryption (Fernet: AES-128 with an HMAC).
Where is data hosted?
ScribeLive runs on Microsoft Azure in the US (East US region). To draft the note, the recording is sent to Google's Gemini AI service.
Is patient data used to train AI models?
ScribeLive never uses patient data to train AI models. A recording is sent to the AI service only to draft that visit's note, and is deleted from ScribeLive when the note is signed.