Data Security and Confidentiality

At DepoScribe.ai, we know that are customers are dealing with sensitive data around court cases and other legal matters. We have a strong commitment to ensuring that the data provided to us is handled securely and confidentially. We have many years of experience in the deposition space, so we are familiar with the security protocols around legal data.

Encryption

DepoScribe.ai uses TLS encryption throughout our application to ensure that all data sent between our servers and your system is encrypted. We also used encryption at rest for all files in our cloud storage, keeping your files encrypted while they are on our systems.

Data Access

DepoScribe.ai maintains role-based access for employees on all of our cloud servers and storage. This limits which employees are able to access data in our cloud servers. We follow a process of least privilege, where privileges are only granted based on job need.

DepoScribe.ai has a policy to only access customer data when requested by the customer. If we detect a problem in our systems, we will attempt to resolve it without directly accessing customer data. If we need to access customer data, we will contact the customer and request permission first. In the case of support requests from a customer, we confirm their permission to access data to troubleshoot first.

Third-Party Services

DepoScribe.ai does make use of certain third-party services that assist in providing the DepoScribe.ai service. These services are audited by us to ensure they maintain security protocols internally and externally. We also ensure that we provide the minimum necessary data to utilize these third parties.

Speech-to-Text Providers

DepoScribe.ai makes use of speech-to-text providers that require uploading the audio and return the transcribed text. All of the providers used by DepoScribe.ai are SOC 2 Type II certified. Additionally, these providers attest that the audio files uploaded are deleted as soon as the transcription is completed, and the transcribed text is deleted as soon as our systems retrieve it from the provider. The providers do not maintain any storage of our customer data.

Application Analytics Provider

DepoScribe.ai makes use of application analytics providers to better understand how customers interact with the DepoScribe.ai interface, so that we are able to make improvements based on real customer usage. Our provider is configured to be Private by Default, meaning that data is masked until marked as safe by our team. We do not allow transcript information, speaker information, or any other PII into the analytics provider. We focus on button clicks, time on page, and simple interactions rather than content on the page.

Questions

If you have any questions about our data retention policies or security, you can read more of our security articles or contact us at security@deposcribe.ai