Security & privacy
Your patients.
Your records.
Built to support your practice while keeping your clinical information protected.
Your records stay yours.
Your practice retains ownership of its clinical records. We don’t sell your patient information.
Protected records.
Saved clinical records in our database are encrypted at rest. Connections to our hosted services use HTTPS encryption.
Private AI processing.
Our paid AI services process your content under provider data-protection terms, without using it to train their models.
Your team stays in control.
Clinic access is restricted to authorized staff. Your team reviews AI drafts before approving the clinical record.
How processing and storage work
Touchless uses Supabase for saved records, Vercel for hosting and storage, and authenticated clinic access. Relevant content is sent to service providers to deliver the features you use. Saved records remain available for your clinical workflow; no-training terms do not mean zero retention.
Recorded-visit transcription uses Groq Whisper. Live specialist dictation uses your browser’s speech-recognition service, which may process audio remotely under the browser provider’s terms. AI documentation and specialist responses use Google Gemini.
Email and video features use Resend and LiveKit when enabled. Share private visit and invitation links only with their intended recipients.
Provider terms: Groq data handling · Gemini paid-service terms. Contact us to review retention settings or any agreement required by your practice.
Need an export or have a privacy question?
Email touchless@dvm.com. We’ll verify your clinic access and help with record export, deletion requests, or data-processing questions.