SECURITY & PRIVACY

Clinical information deserves
deliberate safeguards.

ScribeHelp™ combines protected infrastructure with authenticated access, explicit review and documented operating policies.

Discuss security requirements
Illustration of a physician beside a shield and lock, with authentication, protected-record and access-key icons.

IMPLEMENTED CONTROLS

Security throughout the workflow.

Backed by top-tier platforms and infrastructure, with safeguards for clinical data and authorized access.

Encryption

TLS protects application traffic in transit. Clinical recordings, output and visit metadata are stored with encryption at rest.

Multi-factor authentication

The deployed sign-in workflow requires an authenticator-app factor alongside account credentials.

Role-based access

Providers access their own visits. Administrators have controlled organization access. Support access is read-only for visits.

Audit trails

Application audit events record relevant access and changes. Infrastructure activity logging supports operational review.

Controlled recording access

Playback requires authorized visit access. Recording links are short-lived and expire, with access requests audited.

Clinical review gates

Completed notes await physician review. Clinical Output and reviewed-note copy workflows require a saved review.

HIPAA-REGULATED USE

Agreements and safeguards work together.

ScribeHelp™ uses HIPAA-eligible infrastructure to support regulated healthcare workflows. iDeate Solutions LLC has accepted the infrastructure Business Associate Agreement and offers customer BAAs.

More than an infrastructure label.

HIPAA eligibility is not a certification of the entire application. Appropriate agreements, risk management, access practices, configuration and ongoing operating procedures remain part of compliant use.

Contact our team to review your requirements and the applicable customer agreement before processing patient information.

Request a customer BAA →

PRIVACY & RETENTION

Know how your information is handled.

Recordings and notes

Recordings can be retained for authorized playback and source review. Removing a visit from the workspace does not itself erase its stored recordings, notes or audit history.

Request the approved retention policy to review storage, retention and deletion terms for your deployment.

Access and operational records

Clinical data belongs in the authenticated application. Application error logging is designed to avoid patient information, while audit events support accountability for access and changes.

Administrators and support personnel have defined access roles. Review your practice’s access requirements during onboarding.

POLICY DOCUMENTATION

Our policy library.

Read our privacy, retention and security policies. Contact our team for customer-specific terms and the applicable BAA.

Request policy documentation

These pages summarize ScribeHelp policies. Read them with iDeate’s company policies and your applicable customer agreements.

LET’S TALK ABOUT YOUR PRACTICE

See ScribeHelp™ in your workflow.

Request a demonstration and discuss your documentation needs, plan options and onboarding.

Request a demosales@ideatesol.com

Please do not send patient names, recordings or clinical information by email.