Last checked 24 October 2026 Every check below is reviewed by hand at each app release

Security

Security at ScribeIn, in plain words.

What a doctor or surgeon and their patient say never leaves the phone. Below: every security check we run, where we stand on India's rules, and the papers a hospital IT team may ask for.

Our security checks

21 checks in 4 groups

Patient data stays on the phone

  • Speech and AI run on the phoneNo cloud AI service is called. Works with no internet.
  • Consultation audio is never savedHeld in memory only while the session runs.
  • Every note is encryptedAES-256, with the key in the phone's secure hardware.
  • The app locks itselfOpens with PIN, fingerprint or face. Auto-locks after 5 minutes by default.
  • No tracking inside the appNo analytics and no crash reports.

Records you can rely on

  • Patient consent recordedAt the start of every session.
  • Every edit and signature loggedIn an audit log on the phone.
  • Signed PDFs carry an integrity codeAny later change to a signed note can be detected.
  • Your records, your controlExport, keep or delete any note at any time.
  • Backups locked with your passphrase (Pro)Only the doctor knows it. We never receive the file.

Your account with us

  • We hold the least we canYour email, your plan and how many phones use it.
  • Account servers in IndiaMumbai region.
  • Each doctor sees only their own accountDatabase rules block every other account.
  • Payments kept apartCard and UPI details never reach us.
  • Delete your account from the appYour account data is removed from our servers.

How we run ScribeIn

  • Secret keys kept out of the codeNever inside the app or our code store.
  • Our code store is privateOnly our team can see the source code.
  • Website only over an encrypted connectionPlain connections are switched to HTTPS automatically.
  • Email protected against fake ScribeIn mailMail pretending to be from scribein.app is sent to spam.
  • Weekly encrypted backup of account dataAES-256, kept apart from the live database. Last tested that it opens: 24 October 2026.
  • A written plan for security incidentsWho does what, and who we tell, by when.

If something ever goes wrong

We tell the affected doctors and India's Data Protection Board, as the DPDP rules require, and say what we are doing about it. Because patient data never reaches us, a problem at our end cannot expose a consultation.

Who is behind ScribeIn

TINYANGLESTUDIO (OPC) PRIVATE LIMITED, a registered Indian company in Pune (CIN U62010PN2026OPC255673). Contact: the Director, at hello@scribein.app. Where patient data goes, step by step: Your patients' data.

Private by design. Ready for your OPD.

Send this page to your hospital's IT team, or download the one-page overview for them.

Download the security overview Request early access