Security
Останнє оновлення / Last updated: 2026-09-24
Version of 24 September 2026. Short summary; full details are in the Privacy Policy.
Encryption
All data is transmitted over a secure connection (HTTPS/TLS) with HSTS enabled. The database and file storage are encrypted at the disk level by the hosting providers; application-level encryption of individual fields is not yet applied.
Authentication
Passwords are stored only as Argon2id hashes and checked against known breaches. Two-factor authentication (TOTP) is available and mandatory for administrative actions. Sessions use short-lived tokens with rotation; signing out ends all sessions and clears local browser data.
Audio and dictations
By default, audio is processed transiently and discarded. Retaining your own dictations to improve recognition is a separate, voluntary option that is off by default.
Data processing
Speech recognition and text structuring are performed by third-party sub-processors in the USA; the full roster, the data each receives and the storage location are disclosed in Sections 7–8 of the Privacy Policy. Dates and patient identifiers are stripped from text before it is sent to language models for the core operations.
Not a medical device
RadVoice is not a medical device. All clinical decisions remain the radiologist’s responsibility.
Reporting an incident
Report a vulnerability or incident to berezovskiy.a@gmail.com with the subject “Security”. Affected users are notified no later than 72 hours after discovery.