AI tools and client data

Is Freed Scribe safe for client data?

Short answer: Whether Freed Scribe is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Starter, Core and Premier (individual clinician) and on Groups, Freed may use what the appointment recording contains to train its models. Every fact on this page is Freed's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.

By Kfir Yair, CISSP. Published . Updated .

See which AI tools your staff use

Plan by plan, in Freed’s own words

An AI scribe that listens to the appointment and writes the clinical note. The recording is of a patient conversation, so this is the one category where a practice is handing a vendor protected health information by design rather than by accident.

What you are askingStarter, Core and Premier (individual clinician)Groups
Trains the vendor's models by defaultYes, on de-identified notes. Freed publishes no way to decline it, so a practice is contributing clinical notes by using the product.“AI is only trained on de-identified notes.” source, read Yes, on de-identified notes. Freed publishes no way to decline it, so a practice is contributing clinical notes by using the product.“AI is only trained on de-identified notes.” source, read
How to turn training offNot found in the pages we read.Not found in the pages we read.
How long data is keptThe audio goes as soon as the note is written. The note itself stays until somebody deletes it or turns on the 30-day rule.“Patient recordings are saved only until the note has been completed, then automatically deleted.” source, read The audio goes as soon as the note is written. The note itself stays until somebody deletes it or turns on the 30-day rule.“Patient recordings are saved only until the note has been completed, then automatically deleted.” source, read
What an admin can see or controlNot found in the pages we read.Not found in the pages we read.
Single sign-onNot found in the pages we read.Single sign-on is a Groups feature, and an optional one. An individual plan signs in with a password.“Optional single sign-on (SSO)” source, read
Business Associate AgreementFreed says a BAA already covers an individual clinician or a small practice, because it is a schedule of the terms you accepted at sign-up rather than a document you chase.“The BAA included in the platform terms covers individual clinicians and small practices.” source, read A BAA across the whole organisation is listed as a Groups team feature, which is the version a practice with staff wants rather than one per clinician.“Organization-wide BAA” source, read
Where the data is processedThe United States, on Microsoft Azure.“All data is stored within the United States.” source, read The United States, on Microsoft Azure.“All data is stored within the United States.” source, read

An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Freed pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Freed before client information goes near it.

What this means for

The duty does not change because the tool is new. What changes is where the client information ends up.

  • Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
  • Dental and medical practices. Freed publishes a BAA position for this product on Starter, Core and Premier (individual clinician), which is where that conversation starts. See dental practices.
  • CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
  • Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
  • Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.

How to tell which version your staff use

The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.

  1. 1. Ask

    Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.

  2. 2. Look at the billing and the admin console

    This finds what the business pays for. It does not find a personal account, which is the one that matters here.

  3. 3. Look on the computers

    A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.

Settings to check today

From Freed’s own documentation. Each one is a change somebody can make this afternoon.

  • Turn on auto-deletion. Freed leaves the note in place indefinitely unless somebody chooses otherwise, and the default is the one nobody chose.“You can delete notes manually or enable 30-day auto-deletion.” source, read
  • Get the signed copy anyway. Being covered by a schedule you clicked through is not the same as having a document to hand an auditor.“A standalone signed BAA is only required if your organization specifically requests a copy for their records…” source, read
  • Read Freed's own warning about who may sign. A clinician signing on the practice's behalf without authority to bind it has not bound it.“Individual clinicians should only sign a BAA personally if they have explicit authority to legally bind their organization…” source, read
  • If the practice is a clinic rather than a solo clinician, Freed puts the review on you before anyone starts recording.“If you plan to use Freed in a clinic or hospital, ensure their compliance team reviews and approves Freed’s BAA.” source, read

Worth knowing

  • Accepting the terms is what puts the BAA in place, which means nobody at the practice necessarily knows a BAA exists.“When you sign up for Freed, you automatically accept the terms, including the BAA.” source, read
  • A certification is not an agreement. Freed has both, but the audit report is not the thing that makes it your business associate — the schedule above is.“Our systems exceed HIPAA and HItech requirements and are SOC 2 Type 2 certified.” source, read

Questions we get asked

Is Freed Scribe safe for client data?

Whether Freed Scribe is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.

On Starter, Core and Premier (individual clinician) and on Groups, Freed may use what the appointment recording contains to train its models.

Every fact on this page is Freed's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.

Does Freed train its models on what we put into Freed Scribe?

On Starter, Core and Premier (individual clinician) and on Groups, Freed may use what the appointment recording contains to train its models. On Starter, Core and Premier (individual clinician), Groups: Yes, on de-identified notes.

Freed publishes no way to decline it, so a practice is contributing clinical notes by using the product. Freed's own words: "AI is only trained on de-identified notes." (read 2026-11-03).

How long does Freed keep what we put into Freed Scribe?

On Starter, Core and Premier (individual clinician), Groups: The audio goes as soon as the note is written. The note itself stays until somebody deletes it or turns on the 30-day rule.

Freed's own words: "Patient recordings are saved only until the note has been completed, then automatically deleted." (read 2026-11-03).

Can an administrator read what we put into Freed Scribe?

On Starter, Core and Premier (individual clinician), Groups: Not found in the pages we read.

Will Freed sign a Business Associate Agreement for Freed Scribe?

On Starter, Core and Premier (individual clinician): Freed says a BAA already covers an individual clinician or a small practice, because it is a schedule of the terms you accepted at sign-up rather than a document you chase.

Freed's own words: "The BAA included in the platform terms covers individual clinicians and small practices." (read 2026-11-03).

A signed BAA is between your practice and Freed; we do not sign it for you, and we do not read a compliance badge as one.

How do we find out which version of Freed Scribe our staff are using?

Look on the computers. A tool somebody installed themselves, or signed into with a personal account, does not appear in any IT list. Obsidian Ridge's free 30-day AI security assessment takes that inventory for 30 days and shows what each tool could reach.

Sources

Freed’s own pages, with the date each was read. Nothing on this page comes from anywhere else.

All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.

Other tools people ask about

Same question, different answers. The ones in the same category are the ones staff swap between.