Security & Privacy Questions, Compliance (PIPEDA, HIPAA etc)

Security & Privacy Questions – Compliance Guide

NovoNote is committed to protecting patient data and ensuring compliance with security and privacy standards. This guide answers common questions about how our platform adheres to regulations such as AHPRA, HIPAA, PIPEDA and other security protocols. Built to meet the highest standards, NovoNote gives clinicians the confidence to focus on patient care while we safeguard your data and technology.

1. Where is data stored in NovoNote? 
Session notes and transcripts are stored on our servers located in Australia, administered by AWS. Audio recordings are never saved. 

2. Is NovoNote compliant with industry standards?
Yes, NovoNote complies with HIPAA (the USA standard), AHPRA, and the Australian Privacy Principles, and meets global standards for data encryption and security. 

3. Is my data used to train AI?
No. Your data is not used by us or any third party LLM to train AI models. 

4. Is my information shared with third parties?
When using third party LLMs to process data, they receive de-identified information by default, meaning no personally identifiable information is shared. We have data processing agreements in place which ensures these data processors only process data in the service of you, with no secondary use. This contractual measure helps maintain the integrity and confidentiality of your data while enabling us to provide enhanced functionality through external services. 

5. Is NovoNote HIPAA compliant?
NovoNote by NovoPsych is HIPAA compliant. A Business Associate Agreement is available to all USA customers on a Pro plan. Kindly refer to this page for our Business Associate Agreement. 

6. Can patients/clients opt out of using NovoNote?
Absolutely. Clinicians are required to obtain patient consent before using NovoNote, and patients can withdraw consent at any time. We also provide fact sheets, explanatory statements and consent form templates. Kindly refer to our Downloadable Resources for the Client Consent Form and Fact Sheet.