Privacy & data use

Docwrite is a clinician-operated prescription documentation service. The clinician controls which patient details are entered and is responsible for obtaining appropriate patient consent.

Phone sign-in

Your mobile number is sent to Twilio Verify to deliver and verify sign-in codes. Account sessions use secure cookies. Phone verification confirms access to a number; it does not independently verify a medical licence.

Voice and AI processing

When you stop a recording, the audio is sent to OpenAI for transcription. When you send a message, its notes, conversation context, current draft, and sent attachments from that consultation are sent to OpenAI. Files may be read in an isolated OpenAI workspace with external network access disabled. Docwrite does not store the source audio. Temporary agent sessions are deleted after processing where possible; this does not guarantee zero retention by the provider.

Saved records

Patient details, drafts, conversation text, and uploaded files are encrypted in the application database. Access is restricted to the owning clinician account. Record access, edits, approvals, and opening a print copy create audit events. Approved versions are preserved when a draft is changed.

Review and signature

The clinician must review the patient and every medication field. Automated completeness checks do not verify drug interactions or medical appropriateness. Printed drafts need the prescriber’s signature; Docwrite does not currently provide a verified digital signature or submit prescriptions to pharmacies.

Public directory measurements

Public directories send anonymous counts of visits, contact-link clicks and browser performance ratings to Docwrite. Measurements identify only the broad directory and page type. They contain no exact medicine or test URL, search query, referrer, account identifier or patient information. No analytics cookies or advertising trackers are used. Browser Do Not Track and Global Privacy Control signals disable these measurements.

Requests about your data

Patients should contact the clinic that created their record. Clinicians can contact the Docwrite administrator for access, correction, retention, or deletion requests. A self-service deletion process is not currently available.