Security and Privacy

Secure & Private

We’ve taken extensive measures to maintain HIPAA compliance and ensure the utmost security and privacy for all patient data. Scroll down to learn more about our data handling process.

1. Audio Recording

When you use the JotPsych by SmartScribe companion application(s), your session audio is packaged and temporarily hosted in our encrypted, ISO-certified AWS S3 storage solution (the same solution used by the CDC, MedStar Health, and other prominent healthcare providers).

2. SOC-2 Compliant Transcription & PII Redaction

Your interaction is redacted for patient-identifying information (PII) during transcription, so things like names and addresses are removed from the transcript.

3. Audio Permanently Deleted

Your recorded interaction audio is permanently deleted after the redacted transcript is completed.

4. Secure Note Generated

Compartmentalized medically-relevant sections from the redacted transcript are processed through a large-language model compliant with international standards, including CCPA (California Consumer Privacy Act), GDPR (General Data Protection Regulation), and SOC-2, to generate your note.

5. Note Archive & Deletion

The note is then available to edit, review, and add to your EHR. Your JotPsych note is stored temporarily in our SOC-2 + HITRUST + HIPAA-compliant cloud database until you delete it.

Once deleted, the note is gone forever.