Security & Privacy

Clients have trusted Loom Analytics with their sensitive data across the legal, medical and insurance industries for years. Security and access controls are central to the design and foundation of all our products.

Data Residency

US, UK, Canada, and Australia

All data, including media files, supporting documents, and transcripts are stored on Amazon AWS servers. We offer clients the option to choose the region in which their data is processed and stored to comply with local regulations. You can select from one of four regions: the United States, the United Kingdom, Canada, or Australia, providing you the freedom to maintain control over the geographical location of your data while aligning with regional compliance requirements.

Scalability

AWS provides on-demand resources, allowing Claudio to easily scale up or down based on your needs. This elasticity is especially to ensure your turnaround times are not impacted during peak workload periods.

Amazon AWS Hosting

Loom Analytics has partnered with Amazon AWS for cloud hosting services for all its products.

Security

AWS computing environments are continuously audited, with certifications from accreditation bodies across geographies and verticals, including SOC 1/SSAE 16/ISAE 3402 (formerly SAS 70), SOC 2, SOC 3, ISO 9001 / ISO 27001, FedRAMP, DoD SRG, and PCI DSS Level 1.

Reliability

AWS is known for its high availability and fault-tolerant infrastructure. It operates in multiple geographic regions with redundant data centers in each region, supporting our clients’ critical and time sensitive transcription operations on Claudio.

Tailored Data Retention

Ranging from Immediate Delete to Never Delete

We understand that your business is unique with its own data retention requirements. Claudio provides you the flexibility to configure data retention policies according to your specific needs. Our options range from immediate deletion of data after transcription to retaining data indefinitely. This empowers you to align your transcript production your organization's data governance and compliance policies seamlessly.

Automated Workflows

Contactless Transcription Process

Our transcription process is fully automated, meaning that once your video/audio and supporting documents are uploaded to Claudio, our fully automated transcript production pipeline gets to work. This prevents unauthorized access of your sensitive data at any point in the transcription process.

HIPAA-Compliant Processes

For clients operating in the healthcare industry or dealing with sensitive medical data, Claudio's commitment to data security extends to compliance with the Health Insurance Portability and Accountability Act (HIPAA). Our cloud servers and services on Amazon AWS are HIPAA-compliant, ensuring that your data is handled in accordance with the highest industry standards for privacy and security.

GDPR Compliance

Have peace of mind knowing that your personal data is handled with the utmost security.

Claudio is fully GDPR-compliant. We employ secure data storage solutions, strict access controls, and strong encryption protocols to protect all user information. We adhere to our transparent privacy policy and offer easy-to-use data access and deletion options. We guarantee that your data is always processed lawfully and securely.

Client Access Controls

MFA & Limited Access To Transcripts

Clients have the option to enable Multi-Factor Authentication (MFA), while account administrators are required to have it enabled by default. This ensures an extra level of security on client devices. Transcripts are downloaded directly from the web app or can be sent over email using a time limited expiring link for download.

Data Encryption in Transit, at Rest

Security is paramount, especially when handling confidential information.

Claudio employs robust encryption measures to safeguard your data. Data is encrypted using HTTPS protocol and industry standard 256-bit encryption when uploading files through the web app as well as through our API, to our Amazon AWS servers. Once on the servers, it continues to remain encrypted using standard AES-256 encryption, ensuring its integrity and confidentiality throughout its lifecycle.

Frequently Asked Questions

  • Claudio is a fully automated service. This means our staff only have access to files that you provide to us for initial setup.  We do not access any of the live files that you process through the system.

  • The dictations are stored in encrypted format on HIPAA compliant Sydney, Australia AWS servers, and all data related to a request is deleted within 24 hours of it being processed on the server.

  • We do not use client data to train the engine.  Claudio's AI models are pre-trained with 1000s of hours of audio and text of different accents and languages across multiple different industry specialties.

  • Claudio has a multi-stage pipeline: 

    1. The first stage reduces noise in the audio. This stage is continually trained using non-client noisy and clear audios to train the AI model on noise filtering.

    2. The second stage converts speech to text in a contextually sensible manner. In this stage, Claudio’s AI models are not trained using client data. The system continually improves through ongoing advancements which are updated based on broader language trends (e.g. accents, tone of voice) and industry-specific datasets (e.g. medical/medicolegal dictionaries). The better Claudio is able to understand accents and tone as well as learn dictionaries, the better the transcript output. 

    3. The third stage is the only layer that is client-specific, where you provide us with feedback on your files with respect to things like spelling and formatting. We do not require or use your data for this purpose as we have already been producing industry transcripts at 98-99% accuracy for the past few years. This final stage is mainly to improve the accuracy for your specific workflows.

    This approach ensures that our clients' data remains confidential, while Claudio continues to improve its delivery of high-quality transcripts and reports.