Does an AI scribe store recordings of your patients? It depends entirely on the vendor. Published policies run the full spectrum: never stored, deleted at note generation, kept 30 days, or kept indefinitely on a setting your front desk might not know exists. Below is each major vendor’s policy, quoted from their own pages, with the date we checked.
Nobody else publishes this table. Vendors describe their own policy (sometimes carefully, sometimes not) and stay quiet about everyone else’s. So we fetched the pages ourselves.
Key takeaways
- Of 8 vendors we checked on June 12, 2026: 4 say audio is never stored or deleted at note generation, 1 keeps audio 30 days, 1 lets clinics keep it indefinitely, and 1 publishes no number at all.
- Audio and transcripts are separate artifacts. Two vendors that don’t store audio keep transcripts for 2 years, or forever by default.
- Two policies hinge on the word “successful.” Ask every vendor what happens to audio when note generation fails.
- Deleting audio fast does not remove the consent requirement; it still applies in every US state.
AI scribe vendors with audio-retention policies fetched June 12, 2026
say audio is never stored or deleted at note generation: Doximity, Patient Square, Freed, Jane default
longest published audio window among the eight: Suki, which deletes audio and transcript at 30 days
Does your AI scribe store recordings? Eight vendors, quoted
Every quote below comes from the vendor’s own public page, fetched on June 12, 2026. Policies change, which is why each row carries its source. Check the link before you rely on the row.
| Vendor | What their public docs say about audio | Retention window | Source (fetched June 12, 2026) |
|---|---|---|---|
| Abridge | Privacy policy sets no window for clinical audio. Visit content is “Customer Data,” governed by the health system’s own agreement. Deployments publish their own rules: UChicago Medicine says recordings are “never kept for more than one week,” deleted “often on the same day.” | Set by your health system, not published by the vendor | Abridge privacy policy; UChicago Medicine |
| AI Medical Scribe by Patient Square | Audio is processed in memory and discarded once the note is drafted. There is no audio archive, not for us, not for the practice, not for anyone. Notes are encrypted, owned by the practice, exportable and deletable anytime. | None; no recording survives the note draft | Security page |
| Doximity Scribe | ”We do not store or retain any audio. Recordings are processed securely in real time and immediately discarded once the note is generated.” | None claimed | Doximity Scribe announcement |
| Freed | ”Once the note is successfully generated, the audio recording is automatically deleted,” within 60 seconds of the encounter ending, per their FAQ. “Freed does not retain audio by default.” Notes: delete manually anytime, or enable a 30-day auto-delete policy. | Deleted on successful note generation; notes persist until deleted | Freed HIPAA FAQ |
| Healthie | ”Raw audio is not stored by Healthie… audio is processed and discarded.” But: “Transcripts are stored for 2 years from the date of the appointment,” then auto-deleted. | Audio: none. Transcripts: 2 years | Healthie AI Medical Scribe FAQs |
| Heidi | ”No, Heidi does not store audio recordings of patient consultations.” Transcript retention is customizable from 1 day to “never delete,” and “by default, accounts are set to ‘never delete.’” | Audio: none. Transcripts: indefinite unless you change the setting | Heidi compliance FAQs |
| Jane | A clinic-wide Recording Deletion Policy with three options: keep “indefinitely,” delete “immediately after successfully generating a chart entry,” or delete after a set number of days. Default for new users: delete immediately after successful generation. Deleted files persist on secure backups about a week. | Configurable: immediate to indefinite (default: at note generation) | Jane recordings guide |
| Suki | ”The original audio recording is permanently deleted after 30 days.” The transcript is also deleted at 30 days; the final note is retained for the duration of the service contract. | Audio and transcript: 30 days | Suki security FAQ |
Four patterns hide in that table, and they’re worth naming.
Start with never-stored versus deleted-after. “We don’t store audio” (Doximity, Patient Square) and “we delete audio after the note generates” (Freed, Jane’s default) sound identical and aren’t. In the first model there’s no stored artifact at any point, because audio is processed in memory and gone. In the second, a recording exists as a file until a pipeline step succeeds. Usually a distinction without much practical difference. Until the pipeline has a bad day.
- Never stored or deleted at note gen (4)50%
- Audio gone, transcripts kept (2)25%
- Fixed 30-day window (1)12.5%
- No published number (1)12.5%
Then watch the word “successfully,” which is doing quiet work. Freed deletes audio “upon successful note generation.” Jane’s default deletes “immediately after successfully generating a chart entry.” Neither page says what happens to the recording when generation fails. Maybe nothing interesting. But a policy that only describes the happy path has only answered half the question. Ask the other half.
Third, transcripts outlive audio. Healthie discards audio and keeps transcripts for 2 years. Heidi doesn’t store audio and defaults to keeping transcripts forever. A transcript is the same conversation in a different format. If your privacy question was “does a record of everything said in my exam room persist,” the audio answer alone hasn’t answered it.
Last, enterprise vendors delegate the answer. Abridge publishes no retention number; the health system deploying it sets one. A defensible model for a hospital with an information-governance office. If you’re a 3-physician practice, it means the policy is whatever your contract says, so read the contract, not the website.
One honest concession: stored audio is sometimes what you want. Jane’s configurable retention is the better fit if your clinic deliberately keeps recordings. Some practitioners re-listen while finalizing charts, and Jane lets a Full Access user set the window the clinic actually intends. Heidi’s never-delete transcript default is the better fit if you want a permanent searchable record of every consultation beyond the note. Those are legitimate choices. Our argument is only that they should be choices someone made on purpose, not defaults nobody read.
If you’d rather the answer be “there is nothing to configure because nothing is kept,” that’s our model. Read the security page, then book a short demo and ask us the failure-path question live. We like that question.
Why is visit audio more sensitive than the note?
The note is a summary you reviewed and signed. The audio is everything else.
A recording of a 20-minute visit contains the depression screen the patient answered honestly, the “while I’m here” question about an STI, the daughter in the room arguing about her father’s drinking, your own thinking out loud before you settled on an assessment. The note you signed contains none of that phrasing. The recording contains all of it, verbatim, in the patient’s own voice.
That asymmetry has teeth:
- It’s a second record you didn’t author. You control what enters the chart. You don’t control what a microphone heard. If a stored recording and your signed note ever diverge, you’ll be asked about the gap.
- It’s a bigger breach surface. A leaked note is a clinical summary. A leaked recording is a patient’s voice describing their lowest moment. Same incident-response process, very different patient harm.
- It can be requested. Anything retained can, in principle, be sought in a dispute by either side. Penn Medicine’s patient FAQ is blunt about who controls this: recordings are kept (de-identified) “for a short time,” and patients cannot request that previous recordings be deleted. Even careful health systems end up with retention rules the person in the room can’t override.
None of this means stored audio is reckless. It means audio deserves its own line of questioning, separate from “is the note secure,” and most vendor security pages answer the second question while hoping it covers the first.
What should you ask a vendor before the first recorded visit?
Six questions. A good vendor answers each in one sentence, in writing.
- Where does audio live during processing? In memory, or written to disk and queued? Either can be done securely; you want to know which it is.
- What exactly triggers deletion, and what’s the window? “When the note generates” and “within 30 days” are both real answers. “We take privacy seriously” is not.
- What happens to audio when note generation fails? The happy-path question every published policy answers; this is the one some don’t. Our answer: there is no audio archive for a failed draft to land in, full stop.
- How long do transcripts persist, separately from audio? You now know why. Ask about each artifact by name: audio, transcript, note.
- Do backups keep copies after deletion? Jane discloses about a week on secure backups, and that’s the honest shape of a real answer. A vendor who says “deleted means deleted, instantly, everywhere” either built something unusual or hasn’t checked.
- Who in my clinic can change the retention setting? Jane’s policy is clinic-wide and editable by any Full Access user. That’s fine, if you know it. A privacy posture that one staff account can quietly flip is a process risk, not just a setting.
Vendors who handle these six without flinching will probably also survive the evaluation questions that go beyond audio.
What does US law actually require before you record?
Two separate obligations, often blurred together. This is orientation, not legal advice, so confirm specifics with your counsel or malpractice carrier.
Start with HIPAA. Visit audio is PHI the moment it’s captured. Any vendor processing it for you must sign a business associate agreement. No BAA, no deal, even if the audio is deleted in seconds. Patient Square signs a BAA for every customer, on every plan, including the trial week. Ask any vendor whether BAA coverage extends to the subprocessors that touch audio (speech-to-text APIs included), and at which pricing tier the BAA actually becomes available.
The consent side is separate. State law governs recording a conversation, and it doesn’t care how briefly the file existed. Most states require one party’s consent; roughly a dozen (California, Florida, Illinois, Pennsylvania, and Washington among them) expect every party in the room to consent. Fast deletion makes the disclosure easier to say; it does not make the disclosure optional. The line that works in practice is one sentence: “I use a tool that listens and drafts my note so I can pay attention to you, and the audio is deleted once the note is written. OK?” When retention is genuinely zero, that sentence has the advantage of being true.
Where does AI Medical Scribe by Patient Square sit on this table?
In the row with the least to say. The AI Medical Scribe by Patient Square is the ambient scribe module inside Practice Copilot: it listens during the visit and hands back a structured SOAP note, ICD-10 suggestions, and a prescription draft, ready to review and sign about two minutes after the visit. The audio that produced the note is processed in memory and discarded once the note is drafted. No archive, no configurable window, no retention setting a staff account can flip. The security page states the full posture: TLS 1.2+ in transit, AES-256 at rest, role-scoped and logged access, BAAs for every customer, SOC 2 Type II audit underway.
We think zero retention is the right default for a tool that sits in an exam room, and we’re saying that as the vendor whose table row it is. Weigh it accordingly, then check our claim the same way you check everyone else’s: read the page, ask the questions, and make us answer the failure-path one.
What does persist is yours. Notes belong to the practice; export or delete any visit, anytime; we never sell or share clinical data. If a vendor’s retention answer ever stops satisfying you, your exit shouldn’t be held hostage by your own charts.
The fastest way to test all of this is not reading. It’s a week of real visits. Book a short demo, bring this post’s six questions, then run the 7-day free trial in your own clinic and watch where the audio goes. (Nowhere. That’s the point.) For how retention fits into the wider buying decision, the honest comparison of the leading scribes is the next read.
7-day free trial · month-to-month available · audio never stored.