Back to Help center
Privacy, security and HIPAA
How patient information is protected, kept and deleted.
- Is SOAPsuds HIPAA compliant?SOAPsuds is built to be used under HIPAA: you or your practice accept a Business Associate Agreement (BAA) with SOAPsuds, visit records are stored encrypted, everything from a visit is deleted 30 days after the visit, and an activity log shows who opened each visit. Whether your own use meets HIPAA is for you or your practice to decide.
- How long we keep audio, transcripts and notesSOAPsuds deletes each visit (its audio, transcript and note) 30 days after the visit. Copy or download the note into your EHR before then, because the EHR is your record.
- Does SOAPsuds train AI on my patients?We can't yet give you an answer here that we have confirmed in writing for every service SOAPsuds uses. Please email support@soapsuds.io and our team will send you the current terms.
- Keep your account secureUse a strong password that you don't use anywhere else, sign out when you share a computer, and keep your email account safe, because sign-in codes and password resets go there. SOAPsuds also signs you out after an hour without activity.
- What SOAPsuds is and is notSOAPsuds is an assistant that listens to a visit and writes a draft note for your review. It doesn't diagnose, refer, set urgency or make clinical decisions. You review, edit and sign every note.
- Deleting your account and dataA clinician on their own can delete their account in Settings › Account with a code we email you. Your visits are already deleted 30 days after each visit; delete any visit sooner from the visit itself.
- Cookies and analyticsWe measure a small number of steps that new clinicians take while getting started, such as creating an account and starting a first visit. No patient details, visit text or note text are ever sent to analytics.
Still need help?
Email support@soapsuds.io or send us a message. Please don't include patient names or details; the visit date and time is enough for us to find it.
