Clinical trust
Security and privacy in clinical notes with AI
Itaca protects clinical documentation from product design: it complies with applicable HIPAA requirements, works with cloud providers under BAA, encrypts data in transit and at rest, does not use clinical data to train models, and provides administrative visibility into usage, access, and activity. clinics and equipment, these controls accompany the shared documentation flow.
Security controls
How Itaca Protects Clinical Documentation with AI
Query audio
Itaca processes audio to generate transcriptions and clinical drafts within the service. Access, retention, and deletion are handled under product security and configuration controls.
Model training
Itaca does not use patient clinical data to train models. The information belongs to the user and their organization; it is not sold or given to third parties for commercial purposes.
Access and roles
Administrators define who can view patients, conversations, documents, drafts, and signed notes within the team.
Signature and traceability
Separate draft notes from revised notes. Subsequent corrections should be recorded as addenda or clarifications.
HIPAA and local regulations
Security applied to the clinical workflow
Itaca meets applicable HIPAA requirements for our operation and works with cloud providers under BAA agreements. The platform encrypts data in transit and at rest, separates permissions by role, and maintains traceability so the clinic can manage documentation, audio, drafts, signatures, and follow-up with control.
- Control access roles for doctors, reception, administration, and support.
- Apply audio, retention, and deletion policies within the secure flow.
- Maintain professional review before saving or signing clinical documentation.
- Provide administrative visibility over team usage, access, and activity.
Public FAQ
Clear answers about clinical data
Does Itaca use clinical data to train models?
No. Itaca does not use patient clinical data to train models. Clinical content belongs to the user and their organization, and is processed to provide the contracted service.
What about the consultation audio?
Itaca processes query audio to prepare transcripts and clinical drafts within the service. The audio is not used for training models or shared with third parties for purposes unrelated to service provision.
Does Ithaca replace clinical judgment or clinic controls?
No. Itaca prepares drafts and organizes clinical documentation, but the professional retains review, clinical decision-making, and final signature. The clinic maintains its internal policies, access roles, and compliance processes.
Who signs or approves the final note?
AI prepares a draft. The professional retains responsibility for reviewing, editing, approving, and signing the final clinical documentation.