Encrypted in transit
All data is encrypted in transit over HTTPS/TLS, with secure transmission practices and access controls.
Security & trust
Security is the architecture,
Security is the architecture,
not a setting.
VOSS is built to the standard patient data demands — encrypted, redacted, and never retained on our servers after processing.
Immediate deletion
Audio files are deleted immediately after transcription — on both the device and the server.
On-device option
On-device transcription keeps all audio on the phone. If it's turned off, we warn you before anything is sent.
PHI redaction
Protected health information is redacted during backend processing and never stored in our infrastructure.
Zero server retention
We do not retain session or user content in our infrastructure after processing is complete.
No tracking or sale
No cross-app tracking, no advertising identifiers, and we never sell personal data.
How your data flows
From the room to the record — and gone.
Data is used only to run the feature you asked for, then deleted.
01
Captured
The visit is recorded on your device, with explicit consent before anything is processed.
02
Encrypted
If sent for processing, data travels encrypted over HTTPS/TLS — never in the clear.
03
Processed
Our backend runs transcription, notes, and possible explanations under a zero-retention AI policy.
04
Deleted
Audio is deleted immediately; no session content is kept in our infrastructure.
Our commitments
Trust, by design and by default.
The safeguards below aren't add-ons — they're how VOSS is built.
🏥
HIPAA-ready
PHI redaction, non-identifying logging, and a BAA path for enterprise deployments.
🤝
Zero-retention AI
Our AI providers operate under a zero-data-retention policy — data is not stored or used to train models.
👤
Human in the loop
VOSS drafts and suggests; every note is reviewed and signed by a clinician.
✋
Explicit consent
A clear consent screen discloses what's collected, who processes it, and how it's protected — before use.
Read the details.
Our Privacy Policy covers data handling, retention, third-party AI services, and your rights in full.