Healthcare AI & Medical Scribes
Freed
Medium riskSelf-serve ambient AI medical scribe that listens to patient visits and drafts clinical notes, aimed at solo clinicians and small practices.
Is Freed safe for confidential data?
Freed is reasonably safe for patient data when used on a paid plan with the BAA in place: the vendor is SOC 2 Type 2 certified, states that audio recordings are deleted automatically once the note and quality checks are complete, and says its AI is trained only on de-identified notes. The gaps are the ones typical of a self-serve product — clinicians can start recording visits during a trial before any BAA or organizational review exists, and recording-consent obligations under state all-party-consent laws (and Canadian health privacy law) sit entirely with the clinician, not the vendor.
Risk by plan
The same product often carries very different terms depending on the tier — consumer plans are where the exposure concentrates.
7-day self-serve trial with no credit card. Trial use typically begins before a BAA is signed or a practice has reviewed the tool — treat real patient audio during a trial as unapproved use.
Freed signs BAAs on paid plans. Vendor states training uses de-identified notes only; audio is deleted after note completion.
Multi-seat plans with organizational billing; same published data handling, with the BAA and admin oversight at the practice level.
Data handling
Training on inputs
Freed states its AI is trained only on de-identified notes, not on identifiable patient data. The claim is vendor-published; no tier-specific carve-outs are documented.
Retention
Audio recordings are stored temporarily and automatically deleted after the note summary and quality checks are complete; the generated note persists in the clinician's account.
Residency
All data is stored in the United States. Canadian clinicians should note there is no published Canadian residency option, which matters for PHIPA and other provincial custodianship expectations.
Compliance
- SOC 2Yes
- GDPR / DPANot verified
- HIPAA BAAYes
Certifications typically apply to specific tiers and contracts — confirm scope in writing before relying on them.
New to these frameworks? See our plain-language guides to SOC 2 and the other AI compliance standards.
Enterprise controls
- BAA on paid plans
- Encryption in transit and at rest
- Automatic audio deletion after note completion
- Group plan with centralized billing and seats
Frequently asked questions
Is Freed AI HIPAA compliant?
Freed states it is HIPAA and HITECH compliant, is SOC 2 Type 2 certified, and signs Business Associate Agreements with healthcare customers on paid plans. Compliance still depends on your side of the arrangement: the BAA must actually be executed, and recording a visit remains subject to consent requirements HIPAA does not cover, such as state all-party recording-consent laws.
Does Freed store patient recordings?
Not permanently, per the vendor. Freed says audio is held temporarily in a HIPAA-compliant environment only until the note summary and quality checks are complete, then automatically deleted. The finished clinical note remains in the account, so note content — not audio — is the long-lived data to govern.
Can a clinician in our practice just start using Freed on their own?
Yes, and that is the main governance risk: Freed is self-serve with a free trial, so an individual clinician can begin recording visits before the practice has signed a BAA, checked consent workflows, or approved the tool. If Freed is going to be used, it should be under a practice-level paid plan with the BAA executed and a documented patient-consent script.
Policy changelog
- Initial entry published from Freed's published security documentation and cited coverage.
Sources
This profile summarizes the vendor's published policies as of the verification date. It is not legal advice.
Freed is probably already in your organization.
Sanitized AI shows you who is using it and redacts sensitive data from prompts before it leaves your control.
More AI tool profiles
Enterprise ambient clinical documentation platform, deeply integrated with Epic, that records clinician-patient conversations and generates structured notes.
Free AI writing and clinical-answer assistant (renamed from Doximity GPT to Doximity Ask) bundled into the professional network used by a large majority of US physicians.
AI medical scribe with a free tier, built by an Australian company and marketed to clinicians in the US, Canada, the UK, and Australia.
Microsoft's enterprise ambient clinical AI (successor to Nuance DAX Copilot) that records patient encounters and drafts documentation inside major EHRs.