Marea is built to hold the minimum patient data we need to do the work. Audio is never stored. Your PMS chart is never replicated. The artifacts we do retain are encrypted, auditable, and yours to delete on request.
Most health-tech platforms collect more than they need and rely on perimeter controls to keep the pile safe. Marea is built the other way around — we hold the minimum required to do the work, and we discard everything else the moment the work is done. Audio is never stored.¹ Your PMS chart is never replicated.² The artifacts we do retain — call summaries, generated letters, completed form submissions — are encrypted, auditable, and yours to delete on request.³
The result is a much smaller surface area than a typical AI vendor. If something ever went wrong, there is no audio to recover, no full chart to expose, and the work artifacts we hold are encrypted at rest. We optimised for a quiet breach report, not a loud one.
Calls are transcribed in real time as they happen. The audio is never written to disk and is discarded the moment the call ends — there is nothing to play back later. The call summary (who called, what they wanted, the outcome) is retained in Marea so your team can review history. Bookings flow directly into your PMS calendar.
Operatory audio is transcribed live and used to generate the note. Both the audio and the raw transcript are discarded the moment the note is written. The finished note flows directly into the chart you already use. Marea does not retain a long-term copy.
Letters are written from the clinical note in your PMS, then stored in Marea so you can re-send, audit, and reference past correspondence. Delivery is through an encrypted portal — every send, open, and reply is tracked. Source patient data is pulled from the PMS in real time, not migrated.
Completed intake submissions auto-sync into the patient's PMS record and are also retained in Marea (encrypted) so your team can search, audit, and export past submissions. E-signatures are legally binding with a full audit trail.
Standard-grade controls applied carefully — none of it surprising, all of it documented and audit-ready.
Every bit of data moving between your practice and Marea travels over TLS 1.2+ with strong cipher suites — the same kind of transport security your bank uses.
Anything Marea keeps — call summaries, letters, form submissions — is encrypted with AES-256 when it isn't being actively read.
Call and operatory recordings are transcribed in real time and immediately discarded. Nothing is written to disk. There is nothing to play back later.
Marea connects to the system you already use through a secure read/write integration. We never migrate, copy, or replicate your patient database.
Every Marea workstation account is provisioned with the least privilege required. Every read, write, and delete is timestamped and attributed.
Full compliance with US healthcare privacy regulations. Aligned to the HIPAA Security and Privacy Rules.
Compliant with Canadian personal information and privacy law for practices north of the border.
Business Associate Agreement signed with every customer before go-live. No add-on, no negotiation cycle, no per-seat surcharge.
Can't find it here? A real person walks through the specifics within a business day.
Your patient chart stays in your PMS — Open Dental, ClearDent, Dentrix, TDO, Eaglesoft. Marea pulls what it needs in real time, never migrates or replicates the chart, and writes outcomes back. The artifacts of work Marea did for you (call summaries, generated letters, completed form submissions) are retained encrypted in Marea so your team can search, re-send, and audit them.
Never stored. Across both Receptionist and Scribe, audio is transcribed in real time and discarded the moment the call ends or the note is generated. There are no recordings on our servers, period. Nothing to play back, nothing to leak.
Receptionist keeps the call summary and the basics about who called — never the audio itself. Scribe keeps nothing long-term — the note goes straight into your chart. Letters keeps the letter we generated and the delivery history. Forms keeps the submission (which also syncs into your chart). Plus the basics for running your account.
There's no audio to find. There's no copy of your patient charts. What we keep — call summaries, generated letters, form submissions — is encrypted, so even if someone got to the storage they'd see scrambled data. It's a fraction of what most health-tech platforms hold.
Yes to both. Export and deletion requests are honoured within hours. The data Marea holds on a given patient is the work artifacts described above — straightforward to package or remove.
Never. Marea operates under a BAA with every customer. Patient data is not used to train external models, sold to third parties, or shared outside the workflow that produced it.
Our Privacy Policy, Terms of Use, and Service Agreement spell it out in full — linked below and at the bottom of every page.
We'll walk through the specifics with your team — BAAs, how Marea fits with your PMS, where your data lives, and anything else IT or compliance is asking about.