Navigate to any session summary to delete a transcript at any time

Once deleted, the transcript is permanently gone with no way to retrieve it

Set up automatic transcript deletion for specific clients through their client settings

Navigate to any session summary to delete the entire session

This removes all associated data and AI-generated analyses

This action makes it as if the session never happened in our system

Navigate to client settings to delete a client

This removes all their associated metadata and session data

This action makes it as if the client never existed in our system

You can irreversibly delete your entire account at any time

This removes all AI summaries, client information, transcripts, and session data

This action is like never having signed up for Tenor

Before taking this step, please consider reaching out to us at support@tenortherapy.com to see if we can address your concerns

Automatically redact all 18 HIPAA-defined identifiers from transcripts

This includes names, addresses, dates, phone numbers, and other personally identifiable information

Adds an additional layer of privacy protection while maintaining clinical utility

Automatically redact sensitive topics from transcripts

Customize redaction for areas like immigration status, explicit content, or abuse discussions

Ensures only essential clinical information is retained in the system

Tenor is HIPAA compliant and follows all relevant HIPAA regulations and guidelines.

Our standard Business Associate Agreement (BAA) is agreed to as part of our terms of service when you sign up for Tenor.

All data is encrypted both in transit (HTTPS) and at rest (256-bit server disk-level encryption).

All enriched data is stored in encrypted relational databases (Amazon Web Services RDS) and all raw session data (captured audio and text transcriptions) is stored in encrypted blob storage (Amazon Web Services S3).

All data is stored in encrypted databases and data storage repositories located in the United States.

Access to AWS infrastructure is limited to members of technical staff who require it for their job function.

All technical staff are required to use multi-factor authentication when accessing any systems that contain sensitive information.

Direct access to the relational databases requires approved access to our Virtual Private Cloud (VPC)—a logically isolated, secure section of AWS where all sensitive systems reside. Only authorized staff, who have completed multi-factor authentication, can access protected resources within the VPC. This ensures that only authenticated users can reach sensitive infrastructure, adding an extra layer of security beyond standard login credentials.

Access to administrative tools (e.g. internal reporting) is limited to members of staff who require it for their job function.

Tenor provides two-factor authentication to all users to substantially decrease the risk of any compromised passwords being used to access to their account.

Tenor automatically logs out users after thirty minutes of inactivity, reducing the risk that idle computers can be used to gain access to sensitive information.

Used to analyze session transcripts and create progress notes or session summaries

OpenAI confirms they do not train their models using data received from integration partners: "OpenAI does not use data submitted to and generated by our API to train OpenAI models or improve OpenAI's service offering."

Used to analyze session transcripts and create progress notes or session summaries

We have a “Zero Retention” agreement with Anthropic, where “Anthropic does not log or store prompts or completions."

Used to create session transcripts from audio recordings

Deepgram does not store or use data for future model training unless enrolled in their Model Improvement Partnership Program

We have explicitly ensured we are NOT enrolled in this program to keep your data as tightly controlled as possible

Used for logging and monitoring