Privacy you can verify, not just read.
Four promises, ratified word for word. Every one of them is a live compliance check the patient can watch — in the room, mid-consult — and this page shows exactly how each is kept.
In Australia, on Akoua's own infrastructure; elsewhere, on vetted global providers under your organisation's consent.
Not audio, not transcripts, not notes. Your consultations are not a dataset.
Audio exists only while you review. Confirm the note and it's deleted; abandoned drafts are swept within 7 days.
Every access is written to an append-only audit log — entries can be added, never edited or removed.
From first word to deletion receipt.
Capture starts only in a consented session; where audio is processed depends on your region.
Audio is kept AES-256-encrypted only while you review the draft — so you can listen back to anything flagged.
The moment you confirm the note, the audio is deleted. Abandoned drafts are wiped by an automatic sweep within 7 days — a hard ceiling.
A QR deletion receipt — login-free, PHI-free — flips to "Verified" only when the audio is actually gone. They can re-scan it any time.
The patient watches the checks run.
During the consult, a privacy view runs live checks — encryption, residency, isolation, deletion, audit. Every line is a check against the running system, never a static claim. It's the difference between "trust our policy" and "watch it hold".
Every access to a record is written to an append-only audit log, enforced at the database level — entries can be added, never edited or removed.
Here's exactly what happens to this consult's recording. Each line is checked live, not just promised.
What you are promised, your clinician can verify. Stored in Australia · audio deleted after confirmation.
The patient leaves with proof, not a pamphlet.
At the end of the consult the patient can scan a QR code and keep the receipt. It's login-free and carries no patient details — just a reference that flips to "Verified" when the audio is actually deleted. They can re-scan it next week and watch it still hold.
It's a small thing with a sharp edge: a deletion promise you can hand to someone is a deletion promise you have to keep.
The unglamorous parts, done properly.
TLS 1.2/1.3 in transit; application-level encryption of transcripts, notes, PII and voiceprints at rest.
WebAuthn by default, password + TOTP fallback, refresh-token rotation, and a WAF in front of everything.
Clinical records are stored on Australian infrastructure (Sydney). Handled in line with the Australian Privacy Principles.
We don't yet hold formal certifications — they're on the roadmap, and we'd rather say that plainly than imply otherwise.
One profile per organisation, chosen at sign-up.
Every organisation runs on exactly one profile, chosen at sign-up and applied to everyone in it — it can't be switched in place. Your clinical record is stored in Australia on both. Change your region any time from the switch in the top bar.
Clinical processing remains in Australia. Akoua infrastructure is primary; AU-resident third-party fallback occurs only with your explicit consent.
Global managed providers process audio and transcripts by default under your organisation's consent. Akoua stores your clinical record in Australia. Neither AWS Bedrock nor Deepgram uses your data to train their models.
Akoua is a documentation aid, not a diagnostic device. It makes no clinical inferences, and every draft requires explicit clinician confirmation before it's saved. Anything unspoken is [not stated] — never a guess. Read the responsible-use statement.
Fair questions.
Only you, while the draft is open — that's what listen-back is for. Every access is written to the audit log, and once you confirm the note there is nothing left to listen to.
An automatic sweep deletes the audio within 7 days. It's a hard ceiling enforced by the system, not a setting someone can forget.
Never. Not audio, not transcripts, not notes. If that ever changed it would be opt-in, disclosed here first — and we have no plans to change it.
It's entirely separate from clinical data — an email address in a standard hosting store, disclosed plainly in the privacy policy.
Show your patients, not just tell them.
Launching soon. Lock in founders pricing — A$79/month + GST — for as long as your subscription stays active.