Security & privacy
Trust centre
How PatientsHeard handles health information, who processes it and where. We list only what is true today and say plainly what is still in progress.
Our commitments
Australia only
Audio, transcripts, notes, logs and backups are stored and processed in Australian hosting regions only, including by our service providers.
No training on patient data
Patient information is never used to train or fine-tune AI models, never sold and never used for marketing.
Audio deleted by default
The recording is deleted when the clinician signs the note, and within 24 hours at the latest if it is never signed.
Clinician review gate
Every draft is labelled as an AI-assisted draft. Nothing is exported or sent until a clinician reviews and signs it.
Consent before recording
Everyone who may speak agrees before recording starts, every session. The consent record is kept.
Access is logged
Role-based access separates organisations. Access to clinical content is recorded in an audit log.
Sub-processors
The service providers that process customer data for us. Each one processes data only in Australia, is bound in writing not to train on it, and is reviewed before it receives any patient information. We give customers at least 30 days' notice before adding or replacing one.
| Service | Data | Provider | Location |
|---|---|---|---|
| Hosting, database, storage, backups | Audio, transcript, note, consent record, account, logs | Under review | Australian region (to be confirmed) |
| Speech-to-text | Audio, transcript | Under review | Australian region (to be confirmed) |
| Draft note generation | Transcript, draft note | Under review | Australian region (to be confirmed) |
| Transactional email to clinicians | Account (name, email). No patient information. | Under review | Australian region (to be confirmed) |
Certifications
We don't hold any security certifications yet. We will list a certification here only once it has been awarded.
Contacts
Security: security@patientsheard.com
Privacy: privacy@patientsheard.com
Request our security pack
For practices, health services and procurement teams: our security overview, privacy documents and sub-processor details.
Online requests open closer to launch. Until then, please email us and we'll reply by email.
hello@patientsheard.comDon't include patient information or details of any patient's care.
PatientsHeard collects these details to send you our security and privacy documents and to keep a record of your request. They are stored in Australia and are not shared outside PatientsHeard and its service providers. If you don't give them, we can't respond. Read our privacy policy to learn how to access or correct your information, or to make a complaint, or email hello@patientsheard.com.