Is DeepScribe safe with your data?

Training licence with no opt-out

Customers grant a worldwide, royalty-free licence to use and create derivative works from clinical recordings using machine learning and artificial intelligence, for improving DeepScribe's products as well as providing the service. The policy describes no way to decline.

De-identified data kept after the contract ends

DeepScribe may create de-identified data from customer recordings and, during and after the term, retain, share and use it for any legal purpose including marketing. That data is carved out of the protections that apply to customer data.

Retention and deletion left to DeepScribe's discretion

Personal data is kept "as long as it remains necessary" with no stated period, and if a customer stops using the service DeepScribe may retain or destroy everything at its own discretion. Returning or destroying health information on termination applies only "if feasible as determined by" DeepScribe.

Security named only in adjectives

The policy promises "reasonable steps" against loss and unauthorised access without naming encryption, access controls or any specific safeguard, and names no security certification or dedicated privacy contact. The one concrete number is a ten business day breach notification deadline in the business associate agreement.