One interface can hide several recipients
You may use a single scribe app from recording through final note, but that does not mean a single company performs every step. An online service could use separate providers for speech recognition, note generation, and storage.
For example, a recording might go to one service to become a transcript, then the transcript might go to another to produce the draft. The two companies would receive different forms of the same clinical conversation. A short final note does not describe the information used along the way.
Read the provider list alongside the actual task
A subprocessor list identifies companies a service uses. It may include payment processors, email providers, and clinical-processing services in the same document. Their presence on the list does not mean they all receive patient recordings.
The useful next step is to map the clinical material:
| Step | Information to identify |
|---|---|
| Speech-to-text | Which service receives the audio and whether a copy remains. |
| Drafting | Which service receives the transcript and any supplied chart context. |
| Storage and support | Where recordings, transcripts, and drafts remain available, and to whom. |
This turns a list of company names into a meaningful account of who receives the conversation. It also avoids spending the same effort on a billing provider that receives payment information and an AI provider that receives clinical text.
Ask for answers about the recording and transcript separately
A provider may delete audio but keep the transcript, or process audio itself while sending text elsewhere for drafting. A statement that recordings never reach a particular company can therefore be true while that company still receives the conversation in text form.
Ask whether the stated protections cover both forms. For a HIPAA-regulated practice, HHS cloud guidance also explains that cloud providers handling ePHI have obligations that need to be reflected in the applicable arrangements. A short vendor list is not a substitute for knowing what each relevant service handles.
Keep the drafting task on your device
Astralcyte performs both transcription and note generation locally. Its privacy policy explains that the recording, transcript, and note do not go to the company through the app. You can edit a familiar note format and copy the result into your existing chart.
Your telehealth service can continue carrying the call, and your EHR can continue holding the final record. Neither requires adding an online scribe provider to the conversation. Local drafting removes that additional clinical transfer while preserving the assistance you wanted from the note-taking tool.