Healthcare AI & Medical Scribes
Scribeberry
Low riskCanadian AI medical scribe and documentation assistant used by tens of thousands of providers, with Canadian data residency and broad Canadian EMR alignment.
Is Scribeberry safe for confidential data?
Scribeberry is one of the stronger fits for Canadian practices on paper: Canadian company, Canadian data residency for Canadian users, SOC 2 Type 2 certification, published HIPAA and PIPEDA compliance, a stated policy that patient data is never used for AI training, and pre-qualification under the Canada Health Infoway AI Scribe Program — the national evaluation through which thousands of clinicians received funded licenses. The residual risks are the ordinary ones: Infoway pre-qualification is procurement vetting, not a provincial privacy ruling, so a custodian in Ontario still owes its own PHIPA analysis (and a PIA where required); and a self-serve scribe can still be adopted by individual clinicians before the clinic has signed anything.
Risk by plan
The same product often carries very different terms depending on the tier — consumer plans are where the exposure concentrates.
Self-serve entry point. Same published no-training policy, but use before an executed agreement still leaves the clinic without contractual cover.
Standard paid plans; the tier most Canadian clinics should formalize, with the applicable privacy agreement executed.
One-year funded licenses for eligible primary care clinicians under the Canada Health Infoway AI Scribe Program, for which Scribeberry is a pre-qualified vendor.
Data handling
Training on inputs
Scribeberry states patient data is encrypted in transit and at rest and never used for AI training.
Retention
Vendor materials describe secure, compliant handling; a single published retention schedule for audio and notes is not prominent — confirm retention windows in your agreement.
Residency
Canadian users' data stays on Canadian servers; Scribeberry positions itself as compliant across all Canadian provinces (PIPEDA plus provincial regimes such as PHIPA in Ontario) as well as HIPAA for US users.
Compliance
- SOC 2Yes
- GDPR / DPANot verified
- HIPAA BAAYes
Certifications typically apply to specific tiers and contracts — confirm scope in writing before relying on them.
New to these frameworks? See our plain-language guides to SOC 2 and the other AI compliance standards.
Enterprise controls
- Canadian data residency
- SOC 2 Type 2 certification
- No-training policy on patient data
- Encryption in transit and at rest
- Infoway AI Scribe Program pre-qualification
Frequently asked questions
Is Scribeberry PIPEDA compliant?
Scribeberry states it is PIPEDA and HIPAA compliant, SOC 2 Type 2 certified, and compliant across all Canadian provinces, with Canadian users' data stored in Canada. Remember that PIPEDA governs the vendor's commercial handling — as a health information custodian you also answer to your provincial regime (PHIPA in Ontario, PIPA in Alberta/BC, Quebec Law 25), so the clinic-side obligations, like consent and a privacy impact assessment where required, remain yours.
Does Infoway pre-qualification mean Scribeberry is approved for my practice?
Not by itself. Pre-qualification under the Canada Health Infoway AI Scribe Program means Scribeberry passed a national procurement-style vetting (one of a small number of vendors, with thousands of clinicians using funded licenses in the national evaluation) — a meaningful signal, but not a substitute for your own provincial privacy analysis, patient-consent workflow, and an executed agreement naming your clinic.
Do we still need an AI policy if we standardize on a Canadian scribe?
Yes. A compliant scribe covers documentation, but clinicians and admin staff still use general-purpose chatbots for letters, summaries, and quick questions — usually free tiers with no Canadian residency and no agreement. Standardizing on a vetted tool works best paired with an explicit policy on what patient information may touch any other AI tool, and visibility into whether that policy holds.
Policy changelog
- Initial entry published from Scribeberry's published security documentation and cited coverage.
Sources
- Scribeberry security page
- Canada Health Infoway AI Scribe Program
- Scribeberry on Infoway pre-qualification
This profile summarizes the vendor's published policies as of the verification date. It is not legal advice.
Scribeberry is probably already in your organization.
Sanitized AI shows you who is using it and redacts sensitive data from prompts before it leaves your control.
More AI tool profiles
Enterprise ambient clinical documentation platform, deeply integrated with Epic, that records clinician-patient conversations and generates structured notes.
Free AI writing and clinical-answer assistant (renamed from Doximity GPT to Doximity Ask) bundled into the professional network used by a large majority of US physicians.
Self-serve ambient AI medical scribe that listens to patient visits and drafts clinical notes, aimed at solo clinicians and small practices.
AI medical scribe with a free tier, built by an Australian company and marketed to clinicians in the US, Canada, the UK, and Australia.