Security & Privacy Questions – Compliance Guide
NovoNote is committed to ensuring the security and privacy of user data. This guide answers common questions related to compliance with regulations such as AHPRA, HIPAA, PIPEDA and other security protocols.
1. Where is data stored in NovoNote? Session notes and transcripts are stored on our servers located in Australia, administered by AWS. Audio recordings are never saved.
2. Is NovoNote compliant with industry standards?
Yes, NovoNote complies with HIPAA (the USA standard), AHPRA, and the Australian Privacy Principles, and meets global standards for data encryption and security.
3. Is my data used to train AI? No. Your data is not used by us or any third party LLM to train AI models.
4. Is my information shared with third parties?
When using third party LLMs to process data, they receive de-identified information by default, meaning no personally identifiable information is shared. We have data processing agreements in place which ensures these data processors only process data in the service of you, with no secondary use. This contractual measure helps maintain the integrity and confidentiality of your data while enabling us to provide enhanced functionality through external services.
5. Is NovoNote HIPAA compliant? NovoNote by NovoPsych is HIPAA compliant. A Business Associate Agreement is available to all USA customers on a Pro plan. Kindly refer to this page for our Business Associate Agreement.
6. Can patients/clients opt out of using NovoNote?
Absolutely. Clinicians are required to obtain patient consent before using NovoNote, and patients can withdraw consent at any time. We also provide fact sheets, explanatory statements and consent form templates. Kindly refer to our Downloadable Resources for the Client Consent Form and Fact Sheet. Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article