Plain answers to the questions your clinic will ask
We publish what we can evidence and label what we cannot yet. No badge stands in for a document.
Where your data goes
A plain list of every component that handles your data: hosting, database, backups, transcription, drafting and email. Legal entity, region, contract and retention for each come with the data-processing agreement.
| Component | Provider or entity | Purpose and retention |
|---|---|---|
| Application hosting and database | Eir Tech managed server infrastructure | Runs the workspace; stores accounts, consultations, notes and signed versions |
| Backups | Eir Tech managed server infrastructure | Operational recovery, under the agreed retention process |
| Transcription and draft generation | OpenAI API | Speech to text and the source-linked draft; Eir does not keep the audio after transcription |
| Eir Tech's mail provider | Sign-in, invitation and notification messages |
The legal entity, region, contract and retention period for each row are listed in the subprocessor list that comes with the data-processing agreement, provided before any real-patient use. We do not claim that all processing is hosted in a particular country or region: confirm locations and safeguards for international transfers in your clinic's agreement.
What is kept, and for how long
Eir does not keep the audio after transcription. The transcript stays with the note as its source and is kept with each signed version, under your clinic's retention policy. Nothing is used for model training under that basis.
Account information is kept while the account is active. Signed versions are preserved for record history, and ending a free trial does not delete records. Account closure, correction, export and retention requests are handled with the clinic's obligations and applicable law in mind; backups follow the agreed operational retention process.
Who can see what
Every record belongs to the clinician who created it and is checked again on every access. One active session per clinician and rate-limited sign-in. Patients enter through expiring invitations, never an ID alone. Drafting, signing, amendments and exports are logged.
Consultations are linked to their clinician and patient. Record-level checks protect viewing, editing, signing and export, and another clinician's records are simply not found. Research EEG images are served through authenticated record access. Consultation source and note content are encrypted in application storage, and operational logging excludes request and response bodies.
What Eir is, and is not
Eir drafts and organises. It does not diagnose, recommend treatment, score risk or triage. The research EEG module is separately governed and separately labelled.
Is Eir a medical device? The documentation workflow (transcript and structured draft for your review) is not a medical device under the MHRA guidance on ambient voice technology of July 2026, because it derives no new information for your clinical decision. The research EEG calculator is being developed as a separately governed module with its own regulatory route, and it never feeds the clinical note.
Generated content is a draft. A clinician reviews it against the source, writes the clinical assessment and signs; later amendments preserve every earlier signed version. Eir supports documentation and does not make clinical decisions.
Agreements
Data-processing agreement, DPIA support pack, subprocessor list and a recording-objection script for patients, provided before any real-patient use.
Before using patient information, agree the data-processing terms and confirm that the service fits your local obligations: recording permissions, clinic access, retention, subprocessors and international transfers. For US protected health information a suitable BAA and processing configuration are required before upload. The free month can be evaluated on synthetic data while these arrangements are completed.
Support you can reach
A named person owns onboarding and unanswered questions. An incident contact, and a clear way to export your signed notes and close your account.
- Technical and data-handling questions: Håkon Berntsen.
- Clinical and research questions: Dr Monica Berntsen.
- Incidents and security reports: [email protected] (see also security.txt).
- Export signed notes as text or PDF at any time from each consultation or patient record. To close your account, write to us; no call is needed. If the service is unavailable, keep signed records in your authorised record system and follow your clinic's continuity procedure.
Product information updated 14 October 2026. This page describes the current workflow; it is not a certification or a substitute for your clinic's agreement.
Reach a signed, exported note on a synthetic case in your first ten minutes.
Start with a synthetic consultation today. Real-patient use begins only after your clinic's data agreement, configuration and access checks are complete.