Dictate anywhere on your screen, capture telehealth audio straight from the call,
and skip the second login.
We understand the privilege of handling sensitive personal information and we take it seriously. Supported by our world-class compliance team, we're at the forefront of data safety for AI scribes globally, ensuring your data remains secure.
Whatever your specialty, we’ve made Heidi both safe and joyful to use. Here’s how.
We know every clinician has their own style and vision of the perfect note, and that's why our incredible Medical Knowledge team—skilled clinicians turned prompt engineers—create hundreds of templates based on your feedback.
Need any tweaks? It's simple: just jump into your template, tell Heidi exactly what you want and where you want it, and she'll remember your changes—you're in charge.
– GP Compliance Partner
Heidi is fully compliant with the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and Qatar's Law No. 13 of 2016 on Privacy of Personal Data Protection, upholding the highest standards of data privacy and security so clinicians can use Heidi with confidence.
Heidi collects consent in accordance with applicable data protection laws in the GCC, and processes personal data lawfully to fulfil contracts with healthcare providers. Data is collected only for two defined purposes: enabling clinical documentation generation and workflow support across Heidi's products, and to enable secure access to the Heidi platform — limited strictly to what is necessary.
We run Heidi on secure cloud infrastructure, and our systems hold ISO 27001, ISO 42001 and SOC 2 Type II certifications. We handle your data in line with local laws, with safeguards that protect data sovereignty and let you and your patients exercise your data rights.
Data is stored in-country in the UAE on cloud infrastructure certified to the highest international security standards, including ISO 27001 and SOC 2 Type II. This means your data stays where it belongs, under local jurisdiction, with appropriate safeguards to preserve data sovereignty and ensure Data Subjects can exercise their legal rights at all times.
Heidi is an assistive tool only. It does not diagnose or make clinical decisions. All outputs are reviewable and editable by the clinician. Data is retained only for the duration specified by the user or organisation, then securely and irreversibly deleted.
Data is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256), with secure key management and strict access controls. Platform access is protected by token-based authentication, Role-Based Access Control (RBAC), and MFA. Heidi maintains 24/7 incident response, with breaches reported in line with applicable legal requirements across the GCC.
Heidi holds ISO 27001, SOC 2 Type II, ISO 42001, and Cyber Essentials Plus certifications, with regular independent audits conducted by accredited third parties. Our Data Protection Officer is Yassin Omar (Head of Legal and Regulatory Affairs). A DPIA is reviewed annually and upon any new feature or integration, in compliance with data protection obligations across the GCC. For more information about our security and compliance posture, please visit our Trust Centre.
Heidi only stores transcripts and notes, and that's it, for as long as you need them. As you speak, Heidi transcribes your words. No audio recordings are ever saved, ensuring there's no hidden playback.
Heidi captures your conversation in real time.
Heidi converts your words into text—accurate, structured, and ready for review.
As soon as Heidi transcribes, the audio disappears—poof!
From the transcript, Heidi generates structured notes and referral letters, and formats documentation based on what the clinician has already decided.
Need to refine or add details? Upload or type in extra context to make your notes more precise.
Once you've reviewed and transferred your notes to the EMR, you can delete everything - no record kept.
There are many ways to ask for consent, and we trust that you choose the one that works for you and your patients. To keep it top of mind, you can ask Heidi to remind you at the beginning of your session - just head to your settings.
Once your notes are generated, take time to review and add any more detail or context before transferring them to your Electronic Health Record (EHR) system.
To protect the confidentiality of your patients’ consults, please avoid sharing your account access. We've made our templates easy to share through our template library, and anyone can try Heidi for free. Curious about giving Heidi a go? Simply create a free account.
Have any more questions?
Short answer, no. Before Heidi processes your session, we strip all data of personal identifiers (think ‘Jane Doe’ instead of the patient’s name), so it can’t be traced back. Your patient’s data remains protected and Heidi does not and will not contact your patients for any purposes.