Clinical
documentation.
Done right.

A clinician-controlled dictation experience with confidence-aware review, medication intelligence, and fast insertion into the existing note workflow.

HIPAA-alignedSecure by designNo default retention
COMPLIANCE

A clear path to HIPAA, SOC 1, and SOC 2

MayScribe ships HIPAA-aligned and BAA-ready. Independent attestations are scoped and staged, and every control is inspectable in your own environment along the way.

NOW
HIPAA-aligned, BAA-ready

Administrative, technical, and physical safeguards mapped to the Security Rule. Business associate agreements executed with your organization and AWS.

PLANNED
SOC 1 and SOC 2 Type II

Operating-effectiveness audits over a full observation window follow Type I, covering both financial and security control objectives.

DATA SECURITY

Nothing stored means nothing to breach

The strongest security posture is not holding the data at all. MayScribe processes audio in memory, verifies deterministically, and keeps PHI inside infrastructure you control.

Zero audio retention

Dictation is processed in memory and discarded at session end. There is no stored audio to leak, subpoena, or breach.

Runs in your VPC

Models, GPUs, and audit logs live inside infrastructure your hospital controls. PHI never crosses a vendor cloud.

Encrypted end to end

mTLS 1.3 in transit over a private VPN path; append-only, WORM-locked audit records at rest.

Bring your compliance team.

We built the audit trail, the BAA package, and the control documentation for exactly this review.