Deleted on completion. Verified in writing.
SolScribe stages your audio encrypted, transcribes it and deletes the staged copy when the job ends. You get a Certificate of Destruction recording exactly what was deleted and when — a record you can file with your own compliance evidence.
Built for behavioral health and clinical practices, legal teams, clinical research, and medical-device QMS — anyone who can’t risk a vendor holding onto a recording.
Status: managed HIPAA processing is waitlisted while we complete the subprocessor BAA chain. Self-hosting is the supported PHI path today — the full pipeline on hardware you control. The BAA is executed at managed-HIPAA onboarding.
Teams that can’t afford a retention mistake
If a recording sitting on someone else’s server is a liability, this page is for you.
Behavioral Health & Clinical
Session notes and intake calls carry PHI you’re responsible for the moment they’re recorded. A vendor with a data-retention policy is still a vendor holding your patients’ data.
Legal
Depositions, client interviews and case discussions are privileged. Transcription shouldn’t create a second copy of the record you didn’t authorize.
Clinical Research
Study interviews and adverse-event calls fall under protocols you signed up to defend. Verified deletion removes an entire category of audit finding.
Medical-Device QMS
Design reviews and complaint-handling calls touch your quality system. You need a processor you can put in your supplier file, not a black box.
What actually happens to your audio
No vague privacy promises. Here is the exact path your file takes, and where it ends.
Encrypted in transit
Your audio is transmitted over TLS and staged in encrypted object storage. It never lands anywhere unencrypted.
Isolated GPU worker
A short-lived signed URL hands the file to an isolated GPU worker running Whisper Large-v3. The audio exists only for the duration of that job.
Deleted on completion
The staged audio object is destroyed immediately after the transcript is produced. No archive copy, no backup, no retention after processing.
Certificate issued
You receive a Certificate of Destruction confirming the job ran and the staged audio was deleted — a record your compliance officer can file.
Only the resulting transcript is retained, encrypted, under your control, until you delete it. We are not claiming audio never touches disk — it is briefly staged in encrypted storage during processing, then destroyed. That distinction is the whole point: we can tell you exactly where it went and exactly when it stopped existing.
Certificate of Destruction
Every job produces a record you can hand to an auditor without having to explain your vendor’s internal policies.
- Attests that the staged audio for this specific job was deleted — not a hash of the audio content itself
- Includes file metadata, processing tier and the exact UTC destruction timestamp
- Downloadable per job, so it lives in your own records, not just ours
- Backed by an immutable audit log entry (actor, action, record ID, timestamp), exportable as CSV
Everything a compliance officer asks for
Not features bolted on for a checkbox. This is the same infrastructure every job runs on.
BAA at onboarding
Managed HIPAA processing runs under an executed Business Associate Agreement with DST Digital LLC — signed at onboarding, before any PHI touches the system. Self-hosted deployments never send us PHI, so no BAA is needed.
Encryption in transit and at rest
TLS on the wire, AES-256-GCM for stored transcripts. Staged objects are encrypted at rest; deletion removes the object from storage.
Access controls & audit logging
PHI operations — reads, writes, deletions, disclosures — are audit-logged with actor, action and timestamp. HIPAA-tier accounts can export the log as CSV for review.
Self-host or managed
Join the managed HIPAA waitlist and run under a BAA at launch, or deploy on your own infrastructure today for full control over where audio and transcripts live.
Compliance infrastructure without the per-seat markup
Clinical transcription vendors charge per provider, per month, indefinitely. SolScribe charges once for the license and per minute for compute.
| Vendor | Model | Typical Cost |
|---|---|---|
| Suki | Per-provider subscription | ~$200–400/provider/mo |
| Abridge | Per-provider subscription | ~$200–400/provider/mo |
| Fireflies Enterprise | Per-seat subscription | ~$200–400/provider/mo |
| SolScribe Compliance & Legal | One-time license + per-minute compute | $499 once, then pennies per minute |
Competitor figures are indicative, based on publicly reported clinical-documentation pricing as of 2026. Confirm current rates directly with each vendor.
Talk to us before you sign anything
Tell us your data flow and we’ll tell you exactly what SolScribe does and doesn’t retain, what the BAA covers, and what a Certificate of Destruction looks like for your use case.