Use Cases
Thoth for Doctors
Patient consultations contain protected health information. In the US, HIPAA governs how that data may be handled. In Europe, GDPR applies. Standard cloud meeting recorders are not HIPAA-covered entities, do not offer Business Associate Agreements (BAAs) on standard plans, and upload audio to servers that may be outside the patient's jurisdiction.
Why cloud recorders don't work here
- No BAA means no HIPAA compliance path. Standard cloud recorders are not HIPAA-covered entities and do not offer Business Associate Agreements on standard plans. Using one for a patient consultation without a BAA is a HIPAA violation, regardless of whether a breach occurs.
- Cross-border transfers trigger GDPR obligations. Patient voice data uploaded to US servers triggers data transfer obligations for EU practitioners. Those transfers require a legal basis, documentation, and in some cases prior review by a supervisory authority.
- Bot-based recorders add a visible participant to patient consultations. Patients who did not consent to a third-party recording tool being present may raise trust and legal objections, and may be entitled to under some regulations.
How Thoth fits
- Audio and transcript never leave your device. No BAA is required because there is no data transmission to a third party. The question of HIPAA coverage does not arise.
- Compliant by architecture. GDPR compliance follows from the absence of a data transfer, not from a compliance certificate that may change. There is nothing to document because there is no data flow.
- No bot joins patient consultations. Recording is handled locally by the app on your Mac. No third party appears in the meeting.
- On-device AI summaries. Patient content stays on your hardware. No AI provider processes the data unless you explicitly choose to use BYOK.
Try Thoth free.
No account required. Free to try. Paid plans have no recording limits.
