SECURITY & PRIVACY
AIdMD is built for clinical work. Privacy, access controls, and human review come first.
Your clinical information belongs in your care work. AIdMD runs in a private AI environment, keeps each customer’s data apart, and controls who has access.
PATIENT DATA
It stays in your EHR. Here is what AIdMD reads, what it keeps, and for how long.
AIdMD reads clinical data when it is needed, through your approved connection. Its working copy of the chart is deleted after 1 hour, and AI Scribe notes after 7 days. The app’s Privacy Policy lists every kind of data and how long it is kept.
AI chat is not saved after you leave the page. EHR connection tokens are encrypted and removed when you disconnect the EHR in AIdMD.
Audit logs are kept for six years so activity can be reviewed. They are separate from the medical record, which stays in your EHR.
PROTECTION AT EVERY LAYER
HOSTING & DEPLOYMENT
AIdMD runs on Azure HIPAA-eligible services, in a private AI environment, with controlled access.
Before we agree on a plan, we go through where your data must be stored, your EHR connection, and your security needs with you.
YOUR CLINICIANS STAY IN CONTROL
Clinical judgment stays with the clinician. Every note, order, and action is reviewed and signed before it is final.
New integrations start with read-only access.
Your governance team approves write-back workflow by workflow.
Once you sign, approved content posts back automatically.
Role-based access and audit logs let you review what happened.
LET’S TALK THROUGH THE DETAILS
We can go through your security questionnaire, your setup needs, and the Business Associate Agreement with you.
FROM THE JOURNAL
A checklist for your review: data protection, integration, clinician control, and how to measure success.
What to check first: the BAA, security proof, write-back, governance, then note quality.
See AIdMD in your workflow.