AI Scribes — Vendor Intelligence Profile

Scribeberry

AI-powered clinical documentation and medical scribe platform.

Review RequiredModerate RiskHIPAA: Conditionalscribeberry.com
BAA Status

Verify Directly

HIPAA Suitability

Conditional

SOC 2

Not publicly disclosed

SSO

Not publicly disclosed

API

Not publicly disclosed

Deployment

Cloud (SaaS)

Vendor Overview

Industry

Healthcare AI / Clinical Documentation

Deployment Model

Cloud (SaaS)

Primary Users

Physicians, clinicians, healthcare providers

Healthcare Suitability

Conditional — BAA, consent, and clinical workflow review required

Headquarters

United States

Primary Use Cases

  • Clinical encounter documentation
  • AI-generated SOAP notes
  • Provider workflow support
  • EHR documentation automation

Security & Compliance

BAA Availability

Verify Directly

HIPAA Suitability

Conditional

SOC 2 Status

Not publicly disclosed.

ISO Certification

Not publicly disclosed.

Authentication / SSO

Not publicly disclosed.

Access Controls

Not publicly disclosed.

Audit Logging

Not publicly disclosed.

Data Retention

Processes patient encounter data for note generation. AI training policy, retention periods, and data residency must be verified.

Customer Data Usage

Not publicly disclosed.

Model Training Practices

Not publicly disclosed.

Security Documentation

Not publicly disclosed.

Privacy Documentation

Not publicly disclosed.

Incident Response

Not publicly disclosed.

BAA Details

BAA availability should be verified through vendor contact before processing clinical PHI.

Compliance Notes

BAA, patient consent workflow, clinical attestation process, and data handling documentation must be established.

AI Governance

AI Classification

Clinical Documentation AI

Human Review

Recommended — Periodic review of AI outputs and automated workflows.

AI Output Risk

Not publicly disclosed.

Oversight Considerations

PHI workflows require BAA and governance review before deployment.

Approval Workflow

Standard VNDRIQ vendor approval workflow recommended.

Monitoring Cadence

Quarterly

Suggested Owner

IT / Compliance / Clinical Governance (varies by use case)

Escalation Triggers

BAA changes, privacy policy updates, new AI features, security incidents, acquisitions.

Enterprise Readiness

Ideal Customer

Physicians, clinicians, healthcare providers

Vendor Maturity

Growing — Active in healthcare with expanding compliance posture.

Enterprise Readiness

Mid-Market — Appropriate for mid-size practices and growing organizations.

Implementation Complexity

Not publicly disclosed.

Integration Requirements

Not publicly disclosed.

EHR Integrations

Not publicly disclosed.

SSO / API

Not publicly disclosed.

Support Model

Not publicly disclosed.

Business Continuity

Not publicly disclosed.

Evaluation Criteria

Security Controls

3/5

Compliance

3/5

Data Privacy

3/5

Vendor Transparency

3/5

Healthcare Readiness

3/5

Governance Readiness

3/5

Implementation Guidance

Restrictions

PHI workflows require BAA and governance review before deployment.

Implementation Notes

Verify BAA, consent workflow, AI data handling, retention, integration security, and provider sign-off process.

Monitoring & Review

Under ReviewLast: 2026-06-04 · Next: 2026-12-04

Review Cadence

Quarterly

Items to Monitor

BAA status, privacy policy, AI feature changes, security certifications, EHR integrations.

Documentation Gaps

Not publicly disclosed.

Vendor Change Triggers

Privacy policy changesTerms of service changesBAA changesSOC 2 renewalNew AI featuresEHR integration changesSecurity incidentAcquisition or funding event

Approval Recommendation

Review Required

Vendor requires additional documentation review before approval. BAA, security certifications, and data handling policies must be verified.

Required Due Diligence

Verify and execute BAA
Request SOC 2 report
Verify SSO availability
Review data retention policy
Confirm AI training opt-out
Document in vendor risk register

Internal Owner

IT / Compliance / Clinical Governance

Documents to Collect

BAA, security questionnaire, privacy policy, data processing agreement.

Executive Buyer Checklist

0/11

Use this checklist to track your evaluation progress for Scribeberry.

Vendor Intelligence Hub

Explore Scribeberry in Context

Related Vendors

Discover Alternatives and Comparisons

Similar Vendors

Other AI Scribes vendors in the VNDRIQ registry.

Approved Alternatives

Vendors with approved or conditional approval status for healthcare use.

Frequently Compared

Compare Scribeberry side-by-side with these vendors.

Related Vendors

Profile Completeness

83%10/12 trust fields

Missing Fields

SOC 2 StatusEHR Integrations

Vendor Snapshot

Category

AI Scribes

Headquarters

United States

Deployment Model

Cloud (SaaS)

Healthcare Suitability

Conditional — BAA, consent, and clinical workflow review required

Risk Level

Moderate Risk

Review Confidence

Under Review

Last Reviewed

2026-06-04

Risk Score

60/100

AI Trust Score

69/100

Start Vendor Review

Request a structured risk assessment for Scribeberry.

VNDRIQ vendor profiles are for operational risk screening and governance support. This is not legal, compliance, or cybersecurity advice. Final vendor approval should include legal, compliance, security, and contract review. Data is based on publicly available information and internal review at time of last verification.