Your information, explained.

Doctor accounts

When the account service is configured, registration sends your name, email, specialty, professional registration number and password through the CaseArc server to Amazon Cognito. Cognito manages your account and verification emails. Passwords are not stored in the application database or browser storage.

Your session

Signing in sets an HTTP-only session cookie for up to one hour. This cookie is used to verify access to the workspace and transcription endpoint. Signing out clears the cookie and requests revocation of your Cognito sessions.

Consultation content

The current workspace keeps session documents in the browser tab’s memory. Refreshing or closing clears them. Exports are downloaded to your device. The public demo uses fictional information and does not record audio.

Audio transcription

In a configured, authenticated workspace, recording requires consent. Pausing sends audio through CaseArc to OpenAI for transcription. Provider data policies apply. Failed recordings remain in memory for retry or download until discarded or the tab closes.

Document assistance and manual transfers

When you request AI assistance in a configured account, the selected consultation text and attached source text are sent through CaseArc to OpenAI to draft, edit or summarise documents, or suggest coding candidates. Responses are requested with storage disabled; provider retention policies still apply. No patient data is sent to VeriClaim or another practice system automatically. Clipboard copies, document exports and workspace backups are controlled by you. Backups include source material and drafts; protect these files. Restored backups require fresh consent and document review.

Privacy enquiries

For questions about your information or data requests: privacy@case-arc.com. This inbox is being set up and cannot receive requests yet. See our contact details.

Before real patient use

This is a product preview for fictional information. The operator’s identity and privacy contact, production data-retention arrangements, practice access controls and provider agreements must be established before this becomes a live clinical service.