Security & compliance

Patient, client and team conversations, kept safe

Allnote is built by Dictalogic. Here is how we protect recordings and notes, and the documents your security review needs.

Allnote is HIPAA compliant. Healthcare organizations can sign a Business Associate Agreement (BAA).

Personal data is processed lawfully and only to provide the service. You can export or delete your data at any time.

Dictalogic’s information security management is certified by Peers Quality Assurance, UKAS accredited (certificate 9940).

Dictalogic is an approved supplier on the UK Government’s G-Cloud framework.

How your data is handled

Recordings and notes are encrypted in transit and at rest.

Each note is private until you share it; workspaces have roles.

Audio is transcribed by Microsoft Azure Speech and Deepgram. No personal identity data is shared with them.

Delete a recording, a note or your whole account from settings.

Business Associate Agreement (BAA)For healthcare organizations under HIPAA
Request
Data Processing Agreement (DPA)GDPR terms for processing on your behalf
Request
ISO/IEC 27001 certificateIssued by Peers Quality Assurance, UKAS accredited
Request
Security questionnaireAnswers to common vendor-assessment questions
Request