Security

Dragon Medical works with audio and text data. To provide for the possibility that the data processed by Dragon Medical contains protected health information (PHI), the following features are available:

• HTTPS (i.e. 256-bit AES encryption possible if supported by the corresponding client networking infrastructure) for communication between client apps and the Dragon Medical system.
• No persistent data storage on Dragon Medical SpeechKit deployments. Data is freed from memory when a session is closed.
• Nuance-hosted level 4 data centers are SOC 2 Type 2 certified.

Dragon Medical SpeechKit complies with the Federal Information Processing Standard (FIPS).

For more information on patient privacy and HIPAA compliance, see: Patient privacy and HIPAA.