How Scriber protects patient information_
Plain statements of what Scriber does with recordings, transcripts and notes, written for clinicians and for the IT and privacy teams who review us.
Last updated 31 October 2026 · Draft for the prototype
Six facts_
You confirm the patient agreed before Scriber records. The answer and the time are stored with the session.
Recordings, transcripts, notes and letters are deleted automatically. You can delete a session, or one recording, sooner.
You choose EU, UK, Australia, Canada and the US when you sign up. Data stays there, AI processing included.
Not by Pixel and not by our AI providers. Our contracts forbid them from storing or training on it.
TLS 1.2 or newer on every connection. AES-256 for stored recordings, transcripts and notes.
Accept the data processing agreement or business associate agreement in the app. No email needed.
What happens to each piece of data_
From the first second of audio to deletion. “You” means the clinician who owns the session and clinic roles they allow.
Scriber does
- Ask for consent before every recording
- Store data only in the region you chose
- Mark facts it did not hear as placeholders
- Keep every version of a draft until deletion
- Log who opened, changed, exported or deleted a session
- Delete everything after 30 days
Scriber doesn’t
- Record without a consent answer
- Use patient data to train AI models
- Send anything to patients or other clinicians without your approval
- Add a diagnosis or treatment you didn’t state
- Sell or share data for advertising
- Let Pixel staff open a session unless you ask for support on it
Your data stays in your region_
The region is fixed when you create the account and shown on your account page. Moving regions is possible on request.
| Region | Stored and processed in | Main law | Agreement |
|---|---|---|---|
| European Union | EU data centres | GDPR | Data processing agreement |
| United Kingdom | UK data centres | UK GDPR, Data Protection Act 2018 | Data processing agreement |
| Australia | Australian data centres | Privacy Act 1988 and the Australian Privacy Principles | Data processing agreement |
| Canada | Canadian data centres | PIPEDA and provincial health privacy laws | Data processing agreement |
| United States | US data centres | HIPAA | Business associate agreement |
No badges for laws_
GDPR and HIPAA are laws, not certificates. Nobody can be “certified” for them. We show how we meet each one and sign the agreement it requires.
Security controls_
| Encryption | TLS 1.2 or newer in transit. AES-256 at rest. Keys managed in the cloud provider’s key service and rotated yearly. |
|---|---|
| Sign-in | Two-factor authentication with an authenticator app or text message. Clinic owners can make it mandatory for every member. |
| Roles | Owner, practice manager, clinician and assistant. Assistants see notes only when the owner allows it. |
| Audit trail | Opening, editing, exporting, sending and deleting a session are logged with the user and the time. |
| Staff access | Pixel staff cannot open a session unless you ask for support on it. That access is time-limited and logged. |
| Backups | Encrypted and kept in the same region. Deleted data leaves backups within 35 days. |
| Testing | Independent penetration test before launch and every year after. A summary is available on request. |
| Development | Code review for every change, dependency scanning, and separate environments for testing. Real patient data is never used for testing. |
What the AI sees, and what it may not do_
Scriber uses speech-to-text and language models from providers that run in your region. They receive only what is needed to draft the document.
What is sent to the AI models?
The audio for transcription, then the transcript, your template, your writing preferences and any context you added. Nothing else from your account.
Can the providers keep or train on it?
No. Our contracts require zero data retention after processing and forbid training. Providers are listed in the sub-processor table below.
How are mistakes caught?
By design and by review. Scriber marks gaps instead of guessing, keeps the transcript beside the note, and requires you to mark every note complete. See the safeguards.
Who is responsible for the note?
The clinician who completes it, as with any note they sign. Scriber adds a line saying the note was drafted with AI and reviewed by the clinician.
Who else handles the data_
Vendor names are published here before launch. Customers are told 30 days before a new sub-processor is added.
| Purpose | Data handled | Location | Vendor |
|---|---|---|---|
| Cloud hosting and storage | All session data, encrypted | Your region | Published before launch |
| Speech-to-text | Audio, processed and not retained | Your region | Published before launch |
| Language model | Transcript, template and context, processed and not retained | Your region | Published before launch |
| Email delivery | Letters you choose to email | Your region | Published before launch |
| Payments | Billing details only, no patient data | EU | Published before launch |
| Support desk | Your messages to us, no patient data unless you send it | EU | Published before launch |
If something goes wrong_
Incidents. If a security incident affects your data, we tell you without undue delay and within 72 hours of confirming it, with what happened, what data was involved and what we are doing about it.
Reporting a vulnerability. Use the security review route on the contact page. We acknowledge reports within two business days and won’t take legal action against good-faith research.
Status. Planned maintenance and outages will be shown on a public status page linked from the footer.
For your security review_
Each item says whether it is available now, on request, or after a milestone.
Are audio recordings stored?
Yes, for 30 days, so you can replay a passage or redraft the note. After that the recording, transcript and session are deleted automatically. You can delete a session sooner at any time.
Where is my data stored?
In the region you choose when you sign up: EU, UK, Australia, Canada and the US. Recordings, transcripts and notes are stored and processed in that region. The region is shown on your account page.
Is patient data used to train AI?
No. Patient data is not used to train any AI model, ours or our providers’. Our contracts with AI providers forbid storing or training on the data we send them.
Do you sign a DPA or BAA?
Yes, on every plan, including Free. The data processing agreement (GDPR and UK GDPR) and the US business associate agreement are accepted in the app, without emailing anyone. Clinics can request a signed copy.
How long are notes kept, and can I delete them?
Sessions are kept for 30 days and then deleted. Copy or export completed notes to your practice software before then. You can delete a session, or one recording within it, at any time.
Who can see my patients’ information?
Only you, and people in your clinic whose role allows it. Clinic owners decide what practice managers and assistants can see. Pixel staff can access a session only when you ask for support on it.