Features
Security
How VoiceboxMD handles clinical audio and notes: audio deleted within 7 days, no patient data in analytics, BAA on every plan, encrypted in transit and at rest.
Medical Dictation Security: What VoiceboxMD Does With Your Data
This page lists the security facts we can show you, and nothing more. For the full detail, including answers for a formal security review, see Security and HIPAA at VoiceboxMD.
- 7 daysaudio is deleted within 7 days, with an audit trail
- No PHI in analyticsno transcripts, notes or patient names
- BAA on every planincluding the free trial
- SOC 2 alignedcontrols mapped to SOC 2 criteria, not certified
Audio Is Deleted Within 7 Days
Every recording gets a deletion deadline when it is uploaded: 7 days. A scheduled job removes audio past its deadline from storage and writes each deletion to an audit trail. Your transcripts and finished notes stay in your account. The recording of the patient does not.
See it in your own EHR. The trial takes minutes, no sales call.
Try it freeNo Patient Information in Analytics
Product analytics and error reports carry only opaque IDs and fixed event names. They never carry transcripts, note text, patient names or anything a clinician typed. Every event passes through one check before it leaves the product, so the rule does not depend on each new feature getting it right.
A Business Associate Agreement on Every Plan
Under HIPAA, a vendor that handles protected health information for a covered entity is a business associate and needs a signed BAA (HIPAA rule 45 CFR 164.504(e)). VoiceboxMD includes the BAA on every plan at no extra cost, including during the free trial. To request a copy, email support@voiceboxmd.com.
Encryption
Audio, transcripts and notes are encrypted in transit and at rest. Access to clinical data is limited to your own practice, and that limit is enforced in the database itself, not only in the app.
SOC 2: Aligned, Not Certified
VoiceboxMD is not SOC 2 certified. Our controls are designed and mapped to the SOC 2 Trust Services Criteria, and the mapping is available on request. We will change this wording when an audit report exists, and not before.
Frequently Asked Questions
How long does VoiceboxMD keep audio recordings?
Up to 7 days. Each recording is deleted when its 7-day deadline passes, and the deletion is written to an audit trail. Your transcripts and notes stay in your account.
Will VoiceboxMD sign a Business Associate Agreement?
Yes. The BAA is included on every plan at no extra cost, including during the free trial. Email support@voiceboxmd.com to request a copy.
Does patient information reach your analytics?
No. Analytics and error reports carry only opaque IDs and fixed event names, never transcripts, note text or patient names.
Is my data encrypted?
Yes. Audio, transcripts and notes are encrypted in transit and at rest.
Is VoiceboxMD SOC 2 certified?
No. Our controls are aligned with the SOC 2 Trust Services Criteria, but we have not been audited or certified.
How do I get security details for my IT team?
Start with Security and HIPAA at VoiceboxMD. For anything it does not cover, email support@voiceboxmd.com and a person will answer.
Reporting a Security Issue
If you find a security problem in VoiceboxMD, please email support@voiceboxmd.com.
Talk to Us About Security
Request the BAA or ask a security question.
Try it on your own charts
No demo, no sales call required. Set up your free trial in minutes.
Start free trial