pour vous et vos patients

Absolutely, Heidi’s compliant in the U.S. in accordance to HIPAA. Our commitment to HIPAA underscores our dedication to maintaining the highest standards of privacy and trust within the healthcare industry. We use a continuous compliance management system that makes sure we are always vigilant for our HIPAA compliance, instead of a point in time audit which can lead to vulnerabilities in between audits. We implement administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of the personal health information (PHI) Heidi handles. Learn more about HIPAA compliance here.

Yes we do. As part of our practices to fully comply with HIPAA, we enter into BAAs with all vendors and partners who may have access to PHI. If your organisation/practice wishes to have BAA in place for implementing Heidi, you can request it through the form below.

Yes! We have DPIAs for all jurisdictions that we operate in. If you need a copy, please don’t hesitate to reach out to our amazing compliance team through the form below.

Short answer, no. Before Heidi processes your session, we strip all data of personal identifiers (think ‘Jane Doe’ instead of the patient’s name), so it can’t be traced back. Your patient’s data remains protected and Heidi does not and will not contact your patients for any purposes.

No, Heidi does not store any audio. As you speak, Heidi types, and the audio immediately goes *poof*. Even if you’re uploading an audio file that was recorded offline, the audio is only stored on your device, and Heidi doesn’t retain any of it once it’s been transcribed.

Locally. Heidi’s “brain” (aka servers) stays strictly in the region you’re based in, keeping everything in line with data localisation requirements under regulations like GDPR.

Step 1: Prevention. Heidi implements the best in class infrastructure - think ISO27001, SOC2 and Cyber Essential compliant, while also being penetration tested every year. The architecture of our data storage also ensures that your protected health information (PHI) is de-identified and processed separately to the rest of the transcript. The reality is though, we have to be prepared for anything, and so all of our users, free or paid, are insured and receive the highest standard of compliance. 

‍

First, you might be wondering what AI scribe hallucinations are? Well, AI sometimes generates content that might be nonsensical or incorrect - think hearing things that weren’t said. And while we’re striving to improve the technology to avoid this from happening, here are some other ways to tackle these:

• Our experienced Medical Knowledge team regularly reviews our models, templates and checks the outputs for accuracy.  
• Your feedback and input is invaluable. We encourage you to review all notes before transferring them to your EHR system. 

‍

If your notes are stored in Heidi at the time they have been subpoenaed, we are legally required to comply and may need to provide access upon request - the short answer being yes.

If you have, however, deleted your notes, they are permanently wiped out from our systems, and we are unable to retrieve them.