Medical records are some of the most personal data there is. Here is exactly how we protect yours, for patients and for doctors.
Your privacy in one paragraph: everything between your device and Doctera travels encrypted, your records are stored encrypted, a doctor needs your permission to see the records other doctors keep about you, and changes to medical records are logged. And we never sell your data.
This is at the heart of Doctera. Each doctor sees the records they keep about you. To see your full history, including what other doctors recorded, a doctor needs your permission, which you can withdraw in one tap, anytime. When your doctor uses Doctera's AI tools, the AI works on what that doctor has recorded about you; other doctors' records are included only if you have given that doctor access to your full history. A doctor only ever sees their own patients.
Every connection between your device and Doctera is protected with TLS (HTTPS), the same encryption your bank uses. No one can read your data as it travels.
Your records, reports and files are stored encrypted by our database provider (Neon) and our file-storage provider (Cloudflare R2). The database provider also keeps a short rolling history, so the database can be restored to an earlier point in time.
Changes to visit notes, patient details, documents, prescriptions, lab requests, appointments, measurements, vaccines and message threads are recorded with who made them and when, and so are full exports and changes to your consents. Opening a record is not kept in that log. Strict per-account isolation means data is never mixed between doctors or patients.
No advertising, no data brokers, no reselling. Your information is used for one thing only: providing your care. To get a copy of your data or have it deleted, contact us: we handle each request by hand.
When a doctor uses Doctera to write a note, the consultation audio is turned into text by a speech-to-text service (Deepgram), and an AI service (Anthropic) drafts the note from that text. The doctor reviews everything before it is saved. The audio recording is kept with the visit in your doctor's record. We do not use your medical data to train AI models, and we have opted out of Deepgram using the audio to improve its models.
Not end-to-end like a chat app, and we'd rather be honest about why. A records platform has to store and process your data so your doctor can open, share and use AI to draft notes from it. Instead, we encrypt everything in transit and at rest, log changes to records, isolate each account, and put you in control of who sees what. That's stronger, in practice, than a promise we couldn't keep.
You can ask to see, correct, get a copy of or delete your data, and withdraw any consent at any time. Most of this is not self-service yet: contact us and we handle each request by hand. Medical records your doctors keep about you may have to be kept for the time the law requires.
Your patients' trust is your reputation. Doctera helps you keep it: consent-gated sharing, a log of changes to records, and no lock-in: you can export your practice's data at any time.
We use only essential cookies, to keep you signed in and the site secure. We do not use tracking or advertising cookies. Maps are loaded by your browser directly from OpenStreetMap, which therefore sees your IP address.
We use outside providers for hosting, the database, file storage, email, speech-to-text and AI. They receive your data only to run Doctera. Our privacy policy names each one and the country it is based in.
Plain answers to the questions patients and doctors ask us most.
Yes. Doctera is designed to keep your medical data safe and private: every connection is encrypted with TLS (HTTPS), records are stored encrypted, each account is strictly isolated, and changes to medical records are logged. Your doctor sees the records they keep about you; another doctor needs your permission to see them.
You, the doctor who keeps the record, the members of that doctor's team the doctor has given access (each only to what their role allows, such as the agenda or the records), and any other doctor you give access to your full history, which you can withdraw in one tap at any time. Doctera's platform administrators can see your name and contact details, and can reach the stored data when that is needed to run, secure or repair the service. When your doctor uses Doctera's AI tools, what that doctor recorded is processed by our AI provider to draft text for the doctor. Changes to records are logged; simply opening a document is not.
Never. We never sell your data: no advertising, no data brokers, no reselling. We do not use your medical data to train AI models. Your information is used for one purpose only: your care. To get a copy of your data or ask for it to be deleted, contact us.
Contact us. We'll answer plainly.