Trust and security
How Chronix Scribe protects data, and the status of each certification. Chronix Scribe is provided by Chronix Health Group Ltd (company number 16663224, registered in England and Wales, registered office 11-13 Upper High Street, Epsom, Surrey, KT17 4QY, ICO registration ZB962513).
The rules built into the product
- Audio is never stored on our servers or by any provider. Speech is transcribed in memory and in transit; only text is kept. The optional offline mode of the Chronix Scribe mobile app (when the mobile app is released) holds audio encrypted on the clinician's own device only until it has been transcribed, and then deletes it.
- Consent before capture — nothing is captured until the clinician confirms that everyone present has agreed.
- Every AI note is labelled "AI-generated: review before signing".
- Attribute, never originate — the AI records diagnoses, medicines, doses and plans only when they were said, links each to the transcript, and never originates a diagnosis, treatment option, risk score or calculation.
- A clinician signs every note — nothing signs itself.
How data flows
- With consent, the clinician's device sends speech to the transcription service (Europe). The audio is not stored; the text transcript comes back.
- The transcript text goes to the AI drafting service, which returns a draft note with a source link for every clinical statement.
- The transcript and the note are stored in our database in London, UK, separated by organisation. A clinician can choose to have the transcript removed when they sign.
- The clinician reviews, edits and signs the note, and can export or delete it at any time.
Where data is processed
| What | Where |
|---|---|
| Database and file storage | London, UK |
| Speech-to-text | Europe |
| AI drafting (text only) | United States today; London, UK when Amazon Bedrock is switched on |
| App server functions (in transit only) | London, UK |
| Malware scanning of uploaded photos (in transit only) | Netherlands (EU) |
| Payments (never patient data) | Ireland and United States |
| Email (never patient data) | Ireland |
| Support assistant (text only; patient details refused) | United States |
| Support mailbox (never patient data) | United States |
Full list: sub-processors.
Controls
- Encryption in transit (TLS) and at rest.
- Row-level security: every organisation's records are separated at database level; roles decide who in an organisation can read what.
- Provider and payment keys are held only on the server.
- Rate limits on transcription, drafting, billing and export endpoints.
- Deletion with a 30-day restore window, then permanent removal by scheduled jobs; a deletion log with no clinical content.
- Free JSON export of everything your sign-in can read, at any time.
- Managed daily database backups kept for 7 days; point-in-time recovery is not used, so a full restore could lose up to 24 hours of changes.
- Practice-system sign-in details held encrypted.
- Breach notification to practices within 48 hours (data processing agreement, clause 12).
Certifications and registrations — honest status
| Status | |
|---|---|
| ICO registration | Registered — ZB962513 |
| Cyber Essentials | In progress |
| NHS Data Security and Protection Toolkit (DSPT) | Planned |
| DCB0129 clinical risk management | Planned |
| SOC 2 / ISO 27001 | Not held |
Reporting a security issue
Please email support@chronixhealthgroup.com with the subject "Security report". We acknowledge within 5 working days, keep you informed, and do not take action against good-faith research that respects patients' privacy and stops at proof of the issue.
Documents
Terms · Privacy notice · Data processing agreement · Sub-processors · AI transparency · Accessibility