How SigmaMD Scribe Handles Patient Data
SigmaMD’s Scribe is designed to save clinicians time while keeping patient privacy and data security at the forefront. Below is an overview of how Scribe works and how patient data is managed.
What the AI Scribe Does
Clinicians can record a visit to generate a draft clinical note. The practice is responsible for telling patients and getting any consent the law requires before recording.
- The audio recording is processed to create a transcript.
- A draft note is generated from the transcript.
- The clinician reviews and edits the note before saving it to the patient chart.
What We Record
- Audio from the visit, when the clinician starts a recording.
- A transcript, generated from the audio, which is used to produce the draft note.
How Data Is Used
- Audio and transcripts are used to generate the draft clinical note and to operate the Scribe feature.
Where Data Is Processed
Data is processed by service providers engaged as subcontractors under SigmaMD’s business associate agreements, including:
- OpenAI for language processing.
- Deepgram for speech-to-text conversion.
Your practice’s business associate agreement (BAA) with SigmaMD is part of the Clinician Agreement. You don’t need to sign a separate BAA.
Where Data Is Stored
- Scribe audio, transcripts and notes are stored on Amazon Web Services (AWS) servers in the United States.
How Data Is Protected
- We use administrative, technical and physical safeguards designed to protect patient data.
- Patient data, including Scribe audio, transcripts and notes, is encrypted in transit using TLS 1.2 or higher between your device and SigmaMD, and between SigmaMD and our storage and AI service providers.
- Audio recordings are encrypted at rest.
- Our HIPAA compliance program is monitored continuously. You can review it in our Trust Center.
How Long Data Is Kept
- Audio recordings are retained for a limited period and then deleted.
- Transcripts and notes are kept as part of the patient record your practice maintains.
Where Patients Can Read More
For details on how SigmaMD handles personal data, please review our Privacy Policy.