Where your data goes, and where it doesn’t
Every system that handles consultation data, what it holds and where. Updated 23 September 2026. If something here is unclear, email support@chronixhealthgroup.com.
Data flow for one consultation
Audio is held only in memory while it is transcribed. Text is what we keep.- Your clinicMicrophoneStreams only after consent is confirmed on screen.
- EuropeSpeechmatics speech-to-textAudio is held in memory to transcribe and never stored.
- LondonTranscript storedSupabase in London. Encrypted, private to each clinic, 30-day restore.
- United StatesGuarded draftingAnthropic receives transcript text only, never audio.
- Your clinicClinician reviews and signsThe draft is labelled until the clinician signs it. The signed note goes to your record.
Note drafting runs on Anthropic in the United States, on transcript text only, never audio. Our application servers in London pass transcript text, and the audio of an uploaded recording, on to transcription and drafting without storing them.
Sub-processors
8 listed · 30 days’ notice to account owners before a new provider| Provider | Purpose | Location | Data it sees |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | London | Accounts, transcripts, notes, clinical photos |
| Speechmatics | Speech-to-text | Europe | Consultation audio, in memory and in transit only, and returns text |
| Anthropic | Note drafting (large language model) | United States | Transcript text only, never audio |
| Vercel | Application hosting and server functions | London; global edge network | Requests in transit, including transcript text and uploaded audio in memory; stores no clinical content |
| Railway | Malware scanning of uploaded clinical photos | EU (Netherlands) | Each uploaded photo in transit, for the scan only; nothing is kept |
| Stripe | Payments and receipts | EU / United States | Billing contact and payment details (card data is handled by Stripe, never by us) |
| Resend | Account and service email | EU (Ireland) | Recipient address and the message; never note content |
| Google (Google Workspace) | The support@ mailbox where our staff read and reply to support email | United States and other Google locations | Support emails and our replies, never patient information by design |
Translations are written by the drafting provider above and always labelled as machine-translated; no separate translation service is used. Transfer safeguards for providers outside the United Kingdom are set out in the data processing agreement (version 2026-17).
Controls
10 in placeTLS on every connection with HSTS; the database and its backups are encrypted at rest by our database provider.
Every clinic’s records are isolated at database level, and access rules are checked automatically after every database change.
The microphone cannot open until consent is confirmed on screen. The consent script and its version are recorded, never audio.
Checked on every code change: the product has nowhere to store audio.
A diagnosis, medicine, dose or plan appears in a draft only when it was said, linked to its source; anything that cannot be linked is removed and marked. The AI never adds a condition, medicine or plan of its own.
Every draft is labelled “AI-generated: review before signing”. A signed note cannot be changed; corrections are added as dated addenda.
Deleted visits, notes and patients can be restored by the clinic for 30 days, then are removed permanently.
A full export of everything your clinic holds, free, from Settings → Data.
The database is backed up daily. In the worst case up to 24 hours of changes could be lost.
Names, dates of birth and note text are stripped from every error before anything is written. We run our own error log, so no third-party error service sees your data.
Certifications and assurance
Chronix Health Group Ltd (company no. 16663224, registered office 11-13 Upper High Street, Epsom, Surrey, KT17 4QY) is registered as a data controller with the data-protection regulator.
Not certified.
Health-service data security and clinical risk standards. Not held. The product is for private practice.
Automated checks run before every release. No independent penetration test has been done.
Responsible disclosure
Found a vulnerability? Email support@chronixhealthgroup.com with the subject “Security report”, the steps to reproduce it and its impact, never patient data, personal data or credentials. We acknowledge within 5 working days, send an assessment and remediation plan within 20 working days for confirmed issues, and credit you if you wish. We take no legal action against good-faith research that follows the published policy.
Status page
Live status of the app and its database, and 30-day availability.
Data processing agreement
Our data processing agreement covers the sub-processors above, where data is stored, retention and deletion. Version 2026-17 is current while the full agreement is finalised. Practice plans can ask for a countersigned copy.
The legal versions of this page: sub-processors · trust and security · AI transparency · all documents
Privacy notice 2026-18 · Terms 2026-18 · Data processing agreement 2026-17
Intended purpose
Version 1.1 · 26 Sep 2026Chronix Scribe is a documentation support tool for registered healthcare professionals. With the consent of everyone present, it turns what was said in a consultation into written text and drafts a clinical note, letter or patient summary from that stated content, in the clinician’s own template. Every statement about a diagnosis, medicine, dose or plan in a draft is linked to the words in the transcript it came from; anything that cannot be linked is removed and marked. The clinician reviews, edits and signs every note. Nothing is final until the clinician signs it.
In one line: documentation support with clinician review; no diagnosis, differential, treatment guidance, symptom interpretation or autonomous action.
What it is not
Chronix Scribe is not intended to:
- make or suggest a diagnosis or a differential diagnosis;
- interpret symptoms, examination findings or test results;
- triage, prioritise or stratify patients;
- give decision support, risk scores or calculations about a patient’s care;
- recommend, select or adjust a treatment, medicine or dose;
- take any clinical action on its own, such as placing an order, sending a prescription or booking a referral without the clinician;
- replace the clinician’s judgement or the clinician’s review of the record.
Intended users
Registered healthcare professionals (for example doctors, nurses, allied health professionals and registered therapists) and their practice staff, working in private practice in a country where Chronix Scribe is live. The clinician remains responsible for the content of every record they sign. Patients do not use the product directly; they may receive a summary of their visit that their clinician has reviewed.
Exclusions
- Emergency and urgent-care triage.
- Use without a registered clinician reviewing and signing the output.
- Use on patients who have not agreed to the tool listening.
- Any use where the output is acted on before the clinician has reviewed it.