Your visit and your privacy
Last updated: October 22, 2026
Your doctor may use Aural Iris, a secure AI (artificial intelligence) tool, to help write the notes from your visit. Here is what that means for you.
The short version
- Iris records your conversation with your doctor and helps write a first draft of your visit note. Your doctor reviews it, makes any changes and signs it.
- You can say no at any time. Your care stays the same.
- The audio is deleted automatically after your note is done. Backup copies are encrypted and deleted on a set schedule.
- Your information is encrypted, kept in the United States and protected under HIPAA agreements.
- We never sell your information. We never use it for ads or to train AI.
What Iris does
When your doctor turns it on, Iris records your conversation with your doctor and helps write a first draft of your visit note. That way your doctor can pay more attention to you and spend less time typing.
Iris does not diagnose or treat you. Your doctor makes all decisions about your care.
Your doctor signs every note
Iris only helps write a draft. Your doctor reviews the draft, makes any changes, puts the final note in your medical record and signs it there. Iris never signs anything.
You can say no
It's your choice. If you would rather your doctor not use Iris, just say so. You can say it before or during your visit, and you don't have to give a reason. Your care stays the same.
If you change your mind after recording has started, tell your doctor. Your doctor will stop recording and delete that visit from Iris. Copies already in a backup are deleted on the backup schedule.
What happens to the recording
- Iris records only when your doctor turns it on.
- Iris uses the recording to help write your visit note.
- The audio is deleted automatically after your note is done. A temporary, encrypted working copy is cleared automatically, usually within about two days.
- Your doctor's final note goes into your medical record, like any other note. Iris's own copy of the visit is removed automatically 24 hours after your doctor marks it done.
- Encrypted backup copies are kept only so Iris can recover from a system failure. Our off-site backups are deleted after about five weeks. Our hosting company may also keep encrypted backup copies on its own schedule. Something that was deleted can stay in a backup until that backup is deleted.
How we protect your information
- Kept in the United States. Iris, its backups and its AI processing all stay in the United States.
- Protected under HIPAA agreements. The service providers that handle health information for Iris each sign a HIPAA business associate agreement. It is a contract that requires them to protect health information.
- Encrypted. Your information is encrypted to help keep others from reading it.
- Limited access. Access is limited to the people and systems that need it, and Iris keeps a record of who did what.
- Never sold. We never sell your information, never use it for ads and never use it to train AI.
No system is perfectly secure, and we cannot promise that nothing will ever go wrong. We work hard to protect your information.
Questions?
- Ask your doctor or nurse.
- To see or get a copy of your medical record, contact the hospital or clinic where you were seen. Aural Iris handles your information only for your doctor and that hospital or clinic.
- You can also email us at accounts@auraliris.com. Please don't put any health information in your email.
For hospital staff
The safeguards in an Aural Iris pilot:
- The physician reviews, edits and signs every note. Iris helps draft and never signs.
- Patients are told and can say no at any time, with no change in their care.
- In the pilot, the physician places the reviewed note in the hospital’s electronic health record (EHR). Iris does not connect to it.
- U.S. hosting, backups and AI processing, with each provider under a HIPAA business associate agreement.
- Encrypted in transit and at rest, with access limits and an audit log.
- Audio deleted automatically after the note is done. A chart marked done is removed from Iris after 24 hours. Encrypted backups are deleted on fixed schedules.
- No selling, no advertising and no AI training on patient information.
Please don't include patient information in your email.