Security note

Written for the physician who has to answer their data protection officer, and for the physician who simply wants to know where the recording goes.

The one design decision

Anamna holds no health data. Not encrypted, not pseudonymised — none. The audio is processed in volatile memory and destroyed with the HTTP request; the resulting note is returned to your device and never comes back to us. This is enforced in code and covered by an automated test that fails the build if a clinical column ever appears in our database.

What we do store

Your email and password hash, your letterhead (name, specialty, practice, address, registration number, logo), your language settings, your plan, and one row per act containing a timestamp, a duration in seconds and a token count. No patient identifier, no free text.

How your records are protected

On your device, every consultation, patient and letter is sealed with AES-256-GCM. The key is derived from your vault code with PBKDF2-SHA256 (250 000 iterations) and lives only in memory while the app is unlocked. There is deliberately no plaintext search index: an index of patient names would leak precisely what the encryption protects, so search runs over decrypted data in memory.

The processing chain

Your device → our API in France (audio in memory only) → Google Gemini on a paid endpoint whose terms prohibit training on submitted data → the structured note → back to your device. We never use the provider's file API, which would store your audio for 48 hours. Nothing else touches the audio.

Roles under the GDPR

You are the controller of your patients' data. We are a processor acting on your instruction for a transient operation, and Google is a sub-processor. A data processing agreement is available on request and is included with the Practice plan.

What this model costs you

Honesty demands stating it: because we cannot read your vault, we cannot restore it. If you forget your vault code and hold no backup, those records are gone. The app asks you to export an encrypted backup and reminds you if you have not done so in a while.