Patient privacy and HIPAA

The Nuance Healthcare Development Platform and its services were designed from the earliest stages with security and privacy in mind.

If you are providing healthcare applications that can contain patient health information (PHI), you must fulfill HIPAA requirements. Please see the HHS HIPAA page for more info.

The following Dragon Medical SpeechKit features help you achieve HIPAA compliance:

• All communication between your application and Nuance hosted servers is conducted using TLS protocols to ensure end-to-end security.

• Dragon Medical SpeechKit software components do not store any data persistently on the client system or device. Once the session is closed, all data which might be residing in memory is also freed.

• Nuance Healthcare data centers where Dragon Medical SpeechKit is hosted are regulated by strict HIPAA rules. Access to the servers is restricted and limited to trained Nuance employees, and security is enforced through physical and technological means.

If you are providing healthcare applications within the EU and some other regions, your solutions may be subject to different and more stringent patient privacy regulations. For example, in many countries within the EU it is not possible to take any data which might potentially contain information protected by patient privacy outside of the healthcare provider's premises where the patient is treated. For this reason, Dragon Medical SpeechKit will also be available for on-premises deployments in these regions. Please contact your Nuance Healthcare Account Manager for more information.

Important

Despite these powerful features and security considerations, it is your responsibility as a healthcare IT vendor to ensure that the complete solution you provide fulfills all HIPAA requirements and regulations governing your product's target markets such as HIPAA in the USA.

Please also see our privacy policy.