Data privacy & security

Rebrief is built so that clinical information stays where it belongs — inside your clinic, visible only to your signed-in team, and never mixed with another practice's data. Here's what that means in practice.

Your clinic's data stays separate

Every patient, appointment, and note in Rebrief belongs to a specific clinic. Which clinic you belong to is always determined from your signed-in account — never from anything on the screen or in a link — so there's no way for your team to see another clinic's patients, or for another clinic to see yours.

Signing in

You need to sign in before you can view or edit any clinic data. You can add extra protection to your account with multi-factor authentication, and you can reset your password at any time if you forget it.

Sharing documents and summaries

When you share a document or a patient summary — for example, handing a form or an after-care summary to a patient — Rebrief sends it as a secure link rather than an attached file. The link is encrypted and protected by a password, and it only opens in the viewer once that password is entered. Nothing sensitive is sent as a plain attachment.

Intake links you send patients to fill in information ahead of an appointment work the same protective way: each one is signed and time-limited, and tied to that one patient and your clinic. A link minted for one patient can't be used to reach anyone else's record, and it stops working after a set period of time.

Appointment audio is never kept

While you're charting, Rebrief briefly holds the appointment's audio so it can refine your note right after the appointment ends. As soon as that end-of-appointment pass has finished, the audio is permanently deleted — it isn't stored, archived, or kept anywhere, before or after that point.

Note: If that pass can't complete right away (for example, a dropped connection), Rebrief holds the audio only long enough to retry. Once the pass succeeds, the audio is deleted.

Publishing a template to the community

If you choose to publish one of your templates so other clinics can use it, Rebrief checks its text first for anything that reads like patient information — a date, a phone number, an e-mail address, or a person's name written with a title. If it finds anything like that, the template is refused and nothing is stored. You'll need to remove the flagged text before you can publish it. This check runs every time you publish, so a shared template can't accidentally carry a real patient's details into the community library.

What this means for you

• You only ever see your own clinic's patients and appointments.
• Shared links are encrypted and password-protected, never plain attachments.
• Appointment audio is temporary — it's gone as soon as your note has been finalized.
• Templates you publish are automatically screened for patient information before anything goes live.