Security and Patient-Data Handling
Review the BAA, authorized access, retention, and the requirements of your selected scribe service before onboarding.
BAA Review
Business Associate Agreement
Review the BAA with your practice before using NexiScribe with patient information. Discuss the service scope, responsibilities, and any security documentation your practice needs during onboarding.
Data Protection Review
Data Handling
Ask how audio, transcripts, and notes are processed and protected for your selected workflow. Review the privacy policy and confirm which systems and service providers are involved before onboarding.
Retention Review
Retention and Deletion
Audio review and EHR posting have different data needs. Confirm the retention period for each data type, who can request deletion, and how those requests are handled. Do not assume that audio is never stored.
Access Review
Authorized Access
Agree on who may access patient information and the EHR, how access is approved, and how it is removed when coverage ends. Follow your practice's access requirements when setting up human scribe services.
Plan-Specific Review
Human Verification
Concierge Plus includes a trained human scribe checking the AI draft against visit audio. CoPilot and Concierge have different service scopes. Human verification supports the treating clinician's final review and approval.
Questions about security?
Our security team is here to answer any questions about how we protect your patients' data.
Contact Security Team