Artificial intelligence can help reduce the time providers spend documenting care. Scribe uses AI to turn spoken conversations into summarized notes that support clinical workflows, while keeping providers in control of what is recorded, reviewed, and added to a patient’s health record.

Scribe helps providers create structured clinical notes from a conversation or other source material. It can generate SOAP, DAP, PIE and Intake notes from:

AI processes the source material and organizes relevant information into the selected note format within Scribe. The completed note is a draft: providers should always review it for accuracy, make any necessary changes and decide what should be added to the patient’s record.

The AI that powers Scribe does not make clinical decisions, diagnose patients or replace a provider’s professional judgment.

Transcript converts spoken conversations into verbatim written text, giving providers a complete record to reference when reviewing a session or preparing documentation. Unlike Scribe, it does not summarize or structure the conversation into a specific note format.

We understand that healthcare conversations contain highly sensitive information. Privacy and security are central to how these doxy.me tools are designed.

Scribe is designed to support HIPAA-compliant workflows responsibly within doxy.me and is covered by the Doxy.me Business Associate Agreement (BAA). A separate BAA is not required to use Scribe.

To power Scribe, doxy.me works with trusted service providers. Partners that handle protected health information must meet our privacy and security standards and sign a BAA with doxy.me.

When Scribe is running, session audio is temporarily processed to create a transcript and structured clinical note. It does not create or retain a permanent audio recording as part of the standard Scribe workflow. The data needed to generate the note is encrypted, temporarily cached on secure servers for up to 15 minutes and permanently deleted after processing.

The generated note is encrypted and available in the provider’s browser for 90 minutes. After that, it is permanently deleted from doxy.me.

Patient data processed through Scribe:

Providers control whether Scribe is used during a session. A clinic can choose whether to make Scribe available, and individual providers can decide whether to launch it during an appointment.

When Scribe is launched during a session, the patient is notified on screen and a notification remains visible while it is running.

Providers should inform patients and obtain any consent required by applicable law or their organization’s policies before using AI-assisted transcription. A patient can continue receiving care through doxy.me without Scribe being used.

AI can help with the administrative work surrounding care, but it should not replace human oversight. Providers decide when to use Scribe, review the content it produces and determine what belongs in the patient’s official record.

Our goal is simple: to make documentation more manageable without compromising the privacy, security or professional judgment that healthcare requires.

1. Is Scribe HIPAA compliant?

Yes. Scribe is HIPAA compliant and covered by the doxy.me Business Associate Agreement, so you don't need to sign anything extra to use it. As with any tool, your practice should use it in line with your own HIPAA policies, including getting patient consent where required. Data is encrypted during transmission and storage, and doxy.me applies access controls and other safeguards designed to secure protected health information.

2. Will doxy.me sign a Business Associate Agreement covering its AI features?

Yes. Doxy.me provides a Business Associate Agreement covering use of the doxy.me platform, including AI powered apps such as Scribe. A separate BAA is not required for each app.

3. Are 3rd party vendors involved?

Yes. Doxy.me works with trusted AI service providers to support Scribe. A current list of providers is available on request. All integrated vendors that handle protected health information are required to meet doxy.me’s privacy and security standards and sign a BAA.

4. Is any patient data used to train AI models?

No. Data processed through Scribe is not used to train any AI models. Doxy.me does not sell this data to third parties.

5. Are sessions recorded, or only temporarily processed for transcription?

Scribe temporarily processes session audio to create a transcript and structured clinical note. It does not create or retain a permanent audio recording as part of the standard Scribe workflow. Temporary processing takes place in the United States, on doxy.me's infrastructure hosted by AWS and on the infrastructure of our transcription and AI service providers, each operating under a BAA. The data needed to generate the note is retained only temporarily and is permanently deleted after processing, within the documented 15-minute period.

6. Can patients opt out while still receiving care?

Yes. Providers control whether Scribe is launched for a session. Providers can conduct a doxy.me appointment without using Scribe even when it is available for use in their Clinic. Patients are notified when Scribe has been launched, and providers should follow applicable consent requirements and their organization’s policies.

7. How long are transcripts and notes stored?

Generated Scribe notes are available in the providers browser for 90 minutes to be reviewed or downloaded. After that, notes are permanently deleted from doxy.me.

8. Are generated notes part of the patient’s medical record?

Not automatically. Doxy.me does not add Scribe notes directly to a patient’s medical record. The provider must review the output and decide whether to download it and add it to their documentation or health-record system.

9. Is all data encrypted in transit and at rest?

Yes. Access to doxy.me is protected using TLS 1.2 or later. Doxy.me uses AES-256 encryption for data stored at rest on file servers, while video and audio communications use WebRTC with AES-128 encryption.

10. Who can access Scribe notes?

The generated content is made available to the provider hosting the call. Patients do not receive a copy through doxy.me. Access to clinic settings and data is controlled through doxy.me account and clinic permissions only.

11. Are role-based permissions available?

Yes. Doxy.me provides role-based access controls for Clinics, allowing clinic Owners and Admins to control who can manage settings and access platform functionality. Access to Scribe is set at the Clinic level, but individual providers can choose to launch Scribe during their sessions, or not.

12. Does Scribe generate treatment recommendations?

No. Scribe supports administrative documentation by converting session content into structured SOAP, DAP, PIE or Intake notes. It is not designed to diagnose patients, make clinical decisions or replace a licensed provider’s professional judgment.

13. Are notes clearly presented as AI-generated drafts?

Scribe-generated notes are available only to the provider. They are not labelled as AI-generated; instead, they are presented as automatically generated summaries of the conversation, structured in the provider’s chosen note format. Providers are responsible for reviewing Scribe output and making any necessary corrections before adding it to a patient’s medical record. Doxy.me does not automatically finalize or submit the note to an EHR.

14. Can AI features be turned off practice-wide?

Yes. A Clinic can choose not to add or use Scribe.

15. Does doxy.me recommend separate patient consent?

Providers should inform patients and obtain any consent required by applicable law and organizational policy before using AI-assisted transcription. Doxy.me notifies the patient while Scribe is active

16. Does doxy.me provide patient-facing disclosure language?

Yes. Doxy.me provides patient guidance to explain Scribe and offers a Telehealth Appointment Consent form through Teleconsent, that can be used to document consent for AI-assisted transcription and summarization.

Scribe Help Article

Transcript Help Article

BAA Help Article

Teleconsent App

More about doxy.me security