Putting Your Data Security First
In today's digital healthcare landscape, protecting patient information is paramount. At CliniScribe AI, we understand this deeply. That's why we've built our platform with a core focus on data privacy and security, ensuring your trust and compliance with all relevant regulations.
Built for Global Compliance
CliniScribe AI isn't a one-size-fits-all solution. We've meticulously designed our platform to meet the specific data security requirements of your region. Here's how we ensure compliance:​
Australian Privacy Act 1998
We adhere to the Act's principles, prioritising data sovereignty and user empowerment:
-
Local Data Storage: Data resides securely on local Microsoft Azure servers, complying with Australian data sovereignty regulations.
-
Rigorous Auditing & Breach Notification: We maintain adherence to all legal obligations through regular audits, system updates, and robust breach notification processes.
-
User Control over Data: You have the ability to manage and control your personal information within the platform.
HIPPA (US)
We exceed HIPAA standards with robust security measures:
-
Advanced Encryption: Data is secured during transfer and storage with robust encryption techniques.
-
Strict Access Controls: Access to sensitive data is strictly controlled through role-based permissions.
-
Regular Audits & Updates: We conduct frequent audits and update systems to maintain alignment with the latest regulations.
-
Ongoing Team Training: Our team receives continuous education on data privacy and security best practices.
GDPR (EU)
We uphold the high standards of GDPR with a focus on data minimisation and user control:
-
Secure Processing & Encryption: Patient data is encrypted in transit and at rest, with robust security audits ensuring ongoing protection.
-
Immediate Data Erasure: Once processing is complete, data is promptly erased to eliminate unnecessary storage.
-
Transparent Privacy Policy: We clearly explain how data is collected, used, and stored, empowering you to control your information through access, correction, deletion, and transfer options.
Universal Security Features
Beyond regional regulations, CliniScribe AI offers robust security features across the board:
-
Two-Factor Authentication (2FA): Enhance security by enabling 2FA for an extra verification step when accessing your account.
-
Advanced Encryption: Data stays protected with encryption both at rest and in transit.
-
Access Controls: Role-based permissions and strict authorisation protocols limit access to sensitive information.
Your Data. Your Control
We believe in transparency and empower you to manage your data with confidence:
-
FAQ - Data Privacy and Security: Get clear answers to common questions about data collection, storage, and security practices.
-
Data Deletion: If you remove your account or it's inactive for a year, all associated data will be securely deleted.
-
No Payment Information Storage: No patient or user payment details are ever stored by CliniScribe AI. Payments are securely processed through Stripe, adhering to their strict privacy standards.
-
Data Sharing: Your data is never shared with third parties unless required by law or with your explicit consent. Even then, strict agreements govern how your information is protected.
Prioritising Patient Data Security
For patient data, we apply an even stricter approach:
-
Secure Processing & Immediate Deletion: Data like dictations, videos, and SOAP notes are processed securely and then permanently deleted immediately after completion.
Staying Informed, Keeping Secure
-
Cybersecurity Education: We offer regular educational sessions to empower you with the knowledge and tools to further secure your data.
-
Dedicated Support: If you have any concerns, contact our Privacy Officer directly. You can also escalate issues to the relevant data protection authority in your region.
-
How does CliniScribe keep my data safe?Your data is securely stored on Microsoft Azure servers within your region, protected with advanced encryption during transfer and storage. Access is restricted to authorised personnel, and you can enable Two-Factor Authentication (2FA) for an added layer of security.
-
How does CliniScribe help users stay informed about cybersecurity risks?We offer regular education sessions to keep users informed about cybersecurity best practices, risk management strategies, and data protection techniques. These sessions empower you to take proactive steps to further secure your data.
-
What happens to my data if I delete my account or stop using it?If you delete your account or it remains inactive for 12 months, all associated data will be permanently deleted within that timeframe.
-
Does CliniScribe store payment details?No, we do not store payment information. Payments are securely processed through Stripe, which manages your information according to their strict privacy standards. Saving your card details for automated payments is optional and requires your explicit consent.
-
How CliniScribe ensures GDPR compliance?CliniScribe is committed to meeting the highest standards of data protection under GDPR. Patient data is encrypted during transfer and storage, with strict access controls and regular security audits in place. Critically, data is immediately erased after processing to eliminate unnecessary retention. Our transparent privacy policy clearly explains how data is collected, used, and stored, giving you full control to access, correct, delete, or transfer your data. By combining secure processing, immediate data erasure, and transparency, CliniScribe protects patient privacy while fostering trust and compliance.
-
How does CliniScribe handle patient data?Patient data, such as dictations, video recordings, and SOAP notes, is securely processed and deleted immediately after completion to ensure no unnecessary retention.
-
What personal information does CliniScribe collect?We collect essential details like your email, phone number, full name, and clinic information. If you contact us or participate in surveys, we may collect additional information, but only what’s necessary to serve you better.
-
Does CliniScribe share my data with anyone?Your data is never shared with third parties unless required by law or you provide explicit consent. Even in such cases, strict agreements are in place to protect your information. Our support team may access your data only when absolutely necessary to assist you.
-
What if I have a security concern?If you have any concerns or notice a potential issue, you can contact our privacy officer directly. If you’re not satisfied with the resolution, you may escalate the matter to the Australian Privacy Commissioner. Phone: +61 468 945 344 Email: hello@cliniscribe.ai Mail: Nadasha Nguyen, Privacy Officer The AI Dev Australia Pty Ltd 7/946 Burke Road Deepdene VIC 3103
-
Do you encrypt data at rest?Yes, all data is encrypted both at rest and in transit, ensuring it remains secure at every stage.
-
How CliniScribe ensures compliance with the Australian Privacy Act 1998?CliniScribe complies with the Australian Privacy Act 1998 and the Australian Privacy Principles to safeguard personal information. Data is securely hosted on local Microsoft Azure servers, ensuring compliance with Australian data sovereignty requirements. Regular audits, system updates, and rigorous breach notification processes ensure adherence to all legal obligations. Users also have the ability to manage and control their personal information. By implementing these measures, CliniScribe helps healthcare providers meet their legal responsibilities while maintaining the highest standards of patient confidentiality and data protection.
-
How CliniScribe ensures HIPAA compliance?At CliniScribe, safeguarding patient data is our top priority. We meet and exceed HIPAA standards by using advanced encryption to secure data during transfer and storage, ensuring it remains protected from unauthorised access. Strict access controls, including role-based permissions, ensure only authorised personnel handle sensitive information. We conduct regular audits and system updates to align with the latest HIPAA regulations, and our team receives ongoing training to maintain a strong culture of privacy and security. By combining robust technology and continuous education, CliniScribe ensures patient confidentiality is protected every step of the way.
-
What hardware and internet requirements are needed?Any laptop microphone works perfectly, and a standard internet connection is all you need—tethering via phone works just as well.
-
What quality assurance and improvement processes ensure the continued optimisation of the product?You can submit sample notes within the app, and the CliniScribe AI will learn and optimise them for you. Custom prompts are also available, and we’re happy to assist in getting the right prompt.
-
How is ongoing support provided?Our local support team is just an email, SMS, or phone call away. We also offer custom features for clients seeking additional personalisation (starting at around 1000 AUD).
-
What training and support are available for implementation?CliniScribe is intuitive and easy to use, but if you need additional support, we offer induction training via Zoom for your team. Simply request it by emailing hello@cliniscribe.ai.
-
What are the initial and ongoing costs?Here is the official pricing for CliniScribe can be found here: https://cliniscribe.ai/pricing All subscriptions include unlimited dictations, clinical notes, custom report generation, PMS integrations, access to beta features, and the 3rd-party module marketplace.