Security & Confidentiality

Every Audiosent user signs in through an authenticated account, and access to platform functions is governed by role. Access to consultation material is additionally restricted according to the relevant Patient/Healthcare Professional relationship and the material’s sharing state — a Patient sees only material shared with them for their own consultation, and a Healthcare Professional sees only consultations they conduct.

Recording consent must be documented through the established consent workflow before a consultation recording can begin.

The original Audio recording is kept separate from the Transcript, Summary, Key Moments and Consent-related material derived from it. A Transcript and Summary undergo clinician review before being shared with the Patient. Key Moments are navigation aids that help locate parts of the recording, not a separately approved clinical record.

Consultation material within the Patient portal is not exposed as unrestricted public files — it is reachable only by the authenticated Patient it belongs to.

Patient-controlled third-party sharing is built around the following governance rule and controls:

• Sharing is entirely Patient-controlled.
• Only material already shared with that Patient by their clinician is eligible for external sharing.
• The Patient selects specific eligible artefacts, not a blanket export of everything shared with them.
• Access is provided through a secure, time-limited and revocable link.
• The recipient never receives the Patient's Audiosent credentials.
• The recipient never enters the Patient portal.
• The recipient does not receive an unrestricted download of the Audio recording.
• Consent Documents are excluded from external sharing during Beta.

A person who receives a valid sharing link may be able to copy information they can see or hear, or forward the link to another person. Patients should therefore share links only with people they trust, and revoke access when it is no longer required.

Relevant administrative actions are recorded through administrative audit mechanisms, and the creation, editing, approval and sharing of clinical artefacts carries its own provenance information. Any exceptional request to export consultation material requires recorded Admin approval before an export may proceed.

Audiosent Beta uses Malaysian-hosted infrastructure for the storage and operation of the platform.

No digital system can guarantee complete security. Audiosent uses layered controls intended to reduce risk, but does not claim to eliminate it.

• Protect your account credentials and do not share them with anyone else.
• Sign out of Audiosent when you are finished, particularly on a shared or public device.
• Report any suspected account or security problem promptly.

Security or confidentiality concerns may be reported to munitakaur@um.edu.my.