What is the deletion receipt?

At the end of the consult the patient can scan a QR code and keep the receipt. It’s login-free and carries no patient details — just a reference that flips to “Verified” when the copy Akoua holds has actually been deleted. They can re-scan it next week and watch it still hold.

What’s on it

• A status. It reads “Verified — audio deleted” once Akoua’s copy is actually gone, so the patient sees the outcome rather than an assurance.
• A reference. A short code for the session, so the same receipt can be checked again later.
• The date of the consult, which is what makes the reference meaningful to the patient holding it.

Why it works this way

It’s a small thing with a sharp edge: a deletion promise you can hand to someone is a deletion promise you have to keep.

That’s the difference between “trust our policy” and “watch it hold”. The same thinking runs through the patient-facing privacy view during the consult, where encryption, residency, deletion and audit are each checked against the running system rather than asserted.

What it is not

The receipt does not yet speak for third-party processors. That matters on the Global profile and on UK Sovereign, where transcription and note drafting run on providers in the European Union: Akoua does not yet collect independent deletion proof from those providers, so “Verified” covers Akoua’s own copy, not theirs. That distinction is in what happens to consult audio, and it’s worth knowing before you describe the receipt to a patient.

The receipt isn’t a copy of the note and it isn’t a patient portal — there is no clinical content behind the code, nothing that identifies the patient, and no account to sign into. If a patient asks for access to or correction of their record, you are the right first contact; Akoua processes that information on your or your organisation’s behalf and supports you in meeting those requests.

More on how the checks are built: privacy by design. Related: what happens to the audio from a consult.