Restricting access
Access restrictions are among the documented safeguards. Your practice is responsible for its devices and local access; AIRAdoc is responsible for its application and provider configuration.
European providers.
Data sovereignty for your practice.
AIRAdoc exclusively uses European providers for hosting, AI processing and transcription. This choice strengthens your practice’s data sovereignty. Transparent responsibilities and clear rules for access and deletion support the protection of your data.
View privacy documents- Your practiceConversation, dictation or supplied content
- Processing in AIRAdocTranscription and draft creation using the relevant services
- Your documentationReview the draft and transfer it to your own patient record
Processing by the transcription provider lasts until transcription is completed.
European providers for your practice data
AIRAdoc’s product infrastructure combines hosting, AI processing and transcription through European providers. The services processing your data depend on the function you use.
- Hosting
- Telekom Deutschland GmbHHosting the AIRAdoc product on Open Telekom Cloud.
- AI processing
- European companiesProcessing supplied text and creating documentation drafts.
- Transcription
- European companiesConverting recorded conversations and dictation into text.
Processing locations and possible further recipients depend on the service contracted. A provider’s registered address alone does not describe the processing location. See details in the provider overview (PDF).
Access and protection
Technical safeguards and clear responsibilities go hand in hand.
Read about safeguards (PDF)Protecting data in transit
The privacy documents describe protected transmission and procedures for handling security incidents. Details are set out in the technical and organisational measures document.
Assigning responsibilities
AIRAdoc and your practice are jointly responsible for the agreed processing stages involving patient data. A separate agreement describes how responsibilities are allocated.
How long is data stored?
Audio recordings, product content and your practice’s patient records are subject to different retention rules.
Transcription provider: until completion
Processing by the transcription provider lasts until transcription is completed.
Product content: generally up to 90 days
As a general rule, data is deleted no later than 90 days after it is first collected. Earlier manual deletion is possible. Longer retention periods may apply to statutory or regulatory evidence required for certification and quality management.
Patient records remain with your practice
Keep transferred content in your practice’s own patient records. AIRAdoc does not serve as a long-term archive for those records.
All databases are backed up daily. According to the technical and organisational measures, backups are retained on a rolling basis for seven days.
Read our privacy documents
These documents contain detailed information and responsibilities.
- Open PDF
Privacy policy
Data processing, recipients and your rights.
- Open PDF
Technical and organisational measures
An overview of safeguards and responsibilities.
- Open PDF
Joint controllership
How responsibilities are shared between your practice and AIRAdoc.
- Open PDF
Patient information
Information about the processing of patient data.
- Open PDF
Provider overview
Service providers and their roles.
Questions about data protection?
For questions about data processing or the documents, contact our privacy team directly.
datenschutz@airadoc.com