Autoscriber ensures data security by adhering to strict industry standards, including GDPR compliance, EU AI Act, ISO27001 and more, to protect sensitive patient information. The application employs double encryption methods both in transit and at rest, ensuring data is secure at all times. Regular security audits and stringent access controls further safeguard the integrity and confidentiality of the data. Autoscriber doesn’t store audio and within integrations also doesn’t store transcripts and summaries. All data that we do store are stored within the EU at all times.

For Integrations, Autoscriber does not store any data ie. there is no retention policy is required. For the Standalone version, Autoscriber retains only the transcript and summary until the end user deletes it, audio is never stored.

Autoscriber has a strict procurement policy. If a vendor processes any type of customer or patient data, we make sure that they are GDPR compliant. In case of processing PII, the vendor also needs to have at minimum ISO27001 certification and will be checked quarterly on uptime and security incidents.

Autoscriber is GDPR compliant.

Only end users will have access to this data. Co-workers cannot gain access to one another’s conversations. In order to efficiently resolve problems or bugs, trained employees of Autoscriber may request permission to access this data temporarily.

Within an Integration, it is common practice that you login through your EHR where your EHR acts as an SSO (single sign on). Within the standalone application, we use mulifactor authentification to ensure security.