What can the patient see during the consult?

During the consult, a privacy view runs live checks the patient can watch in the room — encryption, residency, isolation, deletion, audit. Every line is a check against the running system, never a static claim.

The checks it runs

• Where your clinical record is stored — Australia (Sydney) on the AU Sovereign and Global profiles; the United Kingdom (London) on the UK Sovereign region.
• Where audio is processed depends on your organisation’s region.
• Deleted after your consult — only the written note is kept.
• Never used to train AI models.
• You agreed before any recording started.
• Every access is logged — in a record that can’t be edited or deleted.
• Your recording and notes are encrypted.

The audit line is worth knowing in detail: every access to a record is written to an append-only log, enforced at the database level — entries can be added, never edited or removed.

Why it runs live rather than reading a policy

It’s the difference between “trust our policy” and “watch it hold”.

A promise printed on a page is the same whether or not the system is keeping it. A check that runs now, in this room, against this consult, is not. What you are promised, the patient can watch you verify.

At the end of the consult

The patient can scan a QR deletion receipt and keep it. It’s login-free and carries no patient details — just a reference that flips to “Verified” when the audio is actually deleted. They can re-scan it next week and watch it still hold. More on the deletion receipt.

If a patient asks a harder question

Privacy by design is the page to show them. It sets out the audio’s whole life, the sovereignty profiles, and the security posture — including that Akoua does not yet hold formal certifications, which is said there plainly rather than implied otherwise.

If the question is about consent itself, start with how consent works before a recording starts.