NoteyDoc is built for real clinical documentation, so protecting the information that passes through it is the core of the product, not an afterthought. Here is exactly how it works.
NoteyDoc starts with a short typed summary or, on the website, an editable transcript of a brief spoken summary. You decide which visit details to include, review the generated SOAP note, and remain in control of what goes into the medical record.
Typed summaries and spoken transcripts submitted for SOAP generation follow the same pre-generation PHI checks on accounts without BAA-active, PHI-enabled authorization. With active BAA and PHI authorization, clinics may process approved PHI under their agreement. Screening is a safeguard, not a guarantee. Spoken audio reaches the transcription provider before transcript screening; avoid speaking identifiers without authorization. All drafts remain subject to clinician review.
A spoken visit summary is sent to OpenAI for speech-to-text and the transcript is placed in Visit Summary for review. This is not full-session recording. NoteyDoc logs limited audio usage metadata, not the recording or its text. See our Privacy Policy for details.
All data sent to and from NoteyDoc is encrypted in transit, and stored data is encrypted at rest.
For practices and agencies whose compliance policies require one, NoteyDoc offers a Business Associate Agreement. Contact support to request a BAA for your organization.
NoteyDoc drafts the note. The therapist reviews it, edits it, and decides what goes into the chart. NoteyDoc never writes to your EHR automatically and never submits anything on your behalf.
If you have a security question we have not answered here, or your agency has a vendor review process, reach out through the Support page and we will respond directly.