Know where
your data goes.
This website
This site provides project information. It does not record encounters, process clinical data, or run transcription or note models.
Local-only desktop workflow
Local transcription and note models run on your device. Model provisioning can require network downloads. Device access, operating-system security, and safe handling of exports remain your responsibility.
Mixed and hosted workflows
The default web configuration uses local Whisper for transcription and a hosted model for note generation. Transcript content is sent to the configured note provider. Other configurations can send audio to a hosted transcription provider.
Review provider configuration and applicable data-handling requirements before recording. Local storage alone does not make an entire workflow local.
Current limitations
OpenScribe does not currently claim HIPAA compliance. AI-generated notes require human review. The repository documents the implementation and its data boundaries; no institutional approval or deployment assurance is implied.
Report a security concern
Use the GitHub Security page to check the project’s reporting options. Do not include patient data, credentials, or exploitable details in a public issue.