Secure login
Users create an account and log in with BankID or BuyPass, providing clear and familiar identity verification.
Privacy and security
Built for responsible clinical use—with Norwegian foundations.
MediVox processes patient information on behalf of the healthcare provider, and nothing reaches the record until the clinician has read and approved the text. Before your organization starts using MediVox, the data processing agreement must be in place, the organization must have made its own assessments, and you must have decided who gets access.
Security throughout the workflow
Limited retention
The audio recording is not stored. The transcript and the generated clinical note are retained for up to 24 hours. Retention beyond that follows the selected service and agreement.
Encrypted processing
Data is protected in transit and at rest. Access is limited to authorized roles and necessary system processes.
Human review
MediVox generates the journal note. The healthcare professional must review, correct, and approve the note before it is transferred to the patient record.
Roles and responsibilities
A correct allocation of roles is required for lawful and safe use.
Healthcare provider
The organization is the data controller for patient information and determines purpose, access, legal basis, and local use.
MediVox
For patient information, MediVox is the data processor and processes it under documented instructions in the data processing agreement. For account, customer, and website information, MediVox is the data controller.
Healthcare professional
Each user is responsible for clinical review and for handling the text according to the organization’s procedures.
Compliance and standards
The labels below describe different kinds of requirements. They are not all certifications.
GDPR
Data protection law
Processing must be governed by a data processing agreement and the organization’s legal basis, procedures, and assessments.
The Norm
Norwegian security foundations
Security work is grounded in relevant Norwegian requirements and recommendations, with multilingual and international use in mind.
CE
CE-marked software
MediVox Helse is CE-marked as medical software. CE marking must not be confused with a general security certification.
ISO 27001
Managed to ISO 27001
We use ISO 27001 as the guideline for how information security is managed – risk assessments, access, procedures, and follow-up follow the structure of the standard. We use it as a framework, not as a certification.
Before your organization uses MediVox
- Enter into and review the data processing agreement.
- Clarify the legal basis, patient information, and any consent requirements.
- Complete the necessary risk and privacy assessments.
- Define roles, access, training, and clinical review procedures.
Ready to evaluate MediVox?
Create an account and get started on your own. Contact us if your organization wants to clarify needs, agreements, or adoption.