HealthOrbit AI

Transcription and note generation are the entire product with no services or platform business underneath. That much follows from what the product is rather than from anything the vendor has evidenced.

Nowhere in the vendor's material is there a review gate, sign off step, confidence threshold or human oversight mechanism, and the product's own claims make that omission more serious rather than less.

The product is described as generating diagnosis and procedure codes automatically, providing diagnostic and treatment recommendations during consultations, and aggregating information from records, laboratory results and imaging to surface potential risks. Three different kinds of output, each with different consequences, and no published account of what a clinician confirms for any of them.

The reasoning that keeps clinical decision support outside device regulation depends almost entirely on human oversight. It assumes a professional can review the basis of a recommendation and reach an independent judgment before acting. A vendor making diagnostic recommendations and publishing nothing about how the clinician engages with them has left unaddressed the single mechanism its regulatory position rests on.

The open points are specific. What does the clinician see alongside a diagnostic suggestion, and can they see what it was derived from. Is a suggestion presented before or after the clinician forms their own impression, since a recommendation shown first anchors judgment in a way one shown second does not. Are generated codes committed automatically or held for confirmation. What happens when the system has low confidence.

The last of those matters most for a product claiming to improve diagnostic accuracy, because a system that is right more often than a clinician on average will still be wrong sometimes, and the value of the oversight step is entirely in catching those cases.

Accuracy is claimed twice at different values in the vendor's own materials, above 90 percent in one place and up to 95 percent in another, with no methodology, reference standard, denominator or date attached to either. The up to construction is unfalsifiable in any case. No model card, named models or evaluation protocol are published.

Nothing identifies any party in the chain: no model or model family, no foundation model provider, no hosting arrangement and no subprocessor list is published. What stands out is how much content the unnamed chain holds. The platform ingests from record systems, laboratory results and imaging alongside transcriptions and builds consolidated historical records on top, so the store contains clinical data about patients whose encounters this product never recorded, and derived analysis built from it.

A patient can therefore be represented inside this system without ever having been in a room where it was running. Two questions follow and neither is addressed. Whether ingested laboratory and imaging data persists or is fetched on demand determines whether that store is a copy or a view, and the answer changes what a breach or a departure would expose.

And whether any of it, or the derived records, contributes to model development is unstated in either direction, which matters more for a product making diagnostic claims because the system was trained on something.

Nothing product specific is published as evidence: no study, no controlled evaluation, no accuracy benchmark, no third party rating, no named customer and no documented deployment. The figures the vendor publishes are market statistics rather than results, such as clinicians losing $65,000 a year to wasted time and two hours saved daily, which describe the category's premise rather than this product's performance. Its profile on a major software review site has been inactive for over a year, which is not evidence of anything on its own but is consistent with the absence of everything else.

No retention schedule, deidentification practice, encryption detail or training use statement is published.

The workflow involves uploading recorded conversations, which makes the absence more consequential rather than less. Uploaded audio is a file that exists somewhere until something deletes it, which is a different exposure from streamed audio discarded on completion.

The platform holds more than audio. It is described as aggregating from record systems, laboratory results and imaging alongside transcriptions, and as generating consolidated historical records that surface potential risks. So the store contains ingested clinical data about patients whose encounters this product never recorded, and derived analysis built on top of it.

Nothing published says what is retained after a note is produced, whether ingested laboratory and imaging data persists or is fetched on demand, or what happens to the generated historical records when a practice leaves.

The training question is unanswered in either direction and matters more for a product making diagnostic claims. A system asserted to improve diagnostic accuracy was trained on something, and nothing says whether a customer's patient data joins that corpus.

HIPAA compliance is asserted, but the assertion appears in the vendor's own comparison blog referring to itself in the third person as one of a group of compliant vendors, rather than as a direct product commitment on a product or trust page. No business associate agreement terms are published. That form of claim is weaker than a plain vendor statement.

There is no named or dated attestation, no report of either type and no trust center.

The vendor publishes an article on its own site asking whether medical records are safe with AI scribes, setting out the privacy and security risks such tools introduce and the measures needed to protect patient information. That is accurate, and it is an argument the vendor does not answer for itself. Here, publishing security guidance has not come with security evidence.

The scope of what an examination would need to cover is wider than a scribe's. The platform is described as ingesting not only encounter audio but record content, laboratory results and imaging, and as generating consolidated historical records. That is a substantially larger data estate than a documentation tool holds, and the questions an assessment answers, how access is scoped, how ingestion is authorized, what an administrator can restrict, become correspondingly more important.

The published workflow adds a specific item. Recorded doctor patient conversations are described as being uploaded to the platform, so audio files exist and move, rather than being streamed and discarded. Where and how those files are stored is exactly what an attestation examines.

Nothing here suggests controls are absent. A counterparty simply has nothing to verify before contracting.

No clearance is claimed and none is published. The problem lies in how the product is positioned around that absence.

The product's co pilot is described as a diagnostic assistant providing treatment recommendations during consultations, and as raising the diagnostic accuracy rate by twenty five percent.

That is not a documentation claim. It is an assertion that using the software makes clinicians diagnose more correctly, by a stated amount. Lacking a clearance is not the problem in itself. A product that makes no device claim, and is scoped to match, needs none. Neither holds here. Clinical claims are made, and no regulatory position, intended use statement or disclaimer addressing them appears anywhere in the company's material. That gap stands without anyone determining whether the product is in fact a regulated device, which is a question for the company and its regulator.

A scribe that describes itself as a documentation tool, and is scoped that way, can go without a clearance. The difference here is self description, not capability.

The evidentiary problem is separate and equally serious. A quantified improvement in diagnostic accuracy is a clinical efficacy claim, and efficacy claims require a study: a comparator, a reference standard for correctness, a defined population and a method. None accompanies it. A figure of that kind either rests on evidence the company has not published, or it does not rest on evidence at all, and a buyer cannot tell which.

Where the claim appears matters too. It sits in blog articles on the company's own domain framed as comparisons of scribe products, rather than on a product page alongside supporting material. A clinical performance claim published as search optimized comparison content, with no evidence attached, is the weakest form this can take.

The company is also United Kingdom based, so the relevant framework for a product making these claims is the British and European device regime rather than the American one, and nothing addresses that either.

Multilingual transcription is marketed, yet no fairness statement, subgroup analysis or accent and dialect performance disclosure is published.

A wider pattern bears on how every unevidenced claim from this vendor reads, and it concerns what the vendor can demonstrate rather than assert.

The vendor publishes quantified performance figures across several claims: a twenty five percent improvement in diagnostic accuracy, a forty percent reduction in coding mistakes. Neither is accompanied by a study, a methodology, a comparator or a population. They appear in blog articles on the vendor's own domain framed as industry comparisons rather than on product pages with supporting material.

A vendor willing to publish precise figures without evidence for the things it wants to claim is not a vendor whose silence on subgroup performance can be read as considered restraint. The absence here is not the modest silence of a company that has not yet run the evaluation; it sits alongside a habit of quantifying what suits.

The multilingual claim is the specific version. Marketing multilingual transcription is a claim about performance across speaker populations, and no language list, per language accuracy or evaluation is published.

One setting reference makes it sharper. Use in emergency departments is referenced in the vendor's content, and that is the environment with the widest range of language, distress and acuity.

No warranty, indemnity or remediation commitment is published, and the accuracy position is worse than an absence because the vendor's own materials disagree with each other. Accuracy is claimed above 90 percent in one place and up to 95 percent in another, with no methodology, reference standard, denominator or date attached to either, and the second figure uses the up to construction that is satisfied by any result at all.

Two published numbers cannot both be relied on, and neither can be when neither is defined. The stakes are raised by what the product claims to do. This is not documentation alone: the platform aggregates record system data, laboratory results and imaging alongside transcription, generates consolidated historical records, and is positioned as surfacing potential risks and improving diagnostic accuracy.

A system that asserts an effect on diagnosis is making a clinical claim, and here that claim has no measurement behind it and no commitment attached. It also widens who can be harmed, because the consolidated record covers patients whose encounters this product never captured.

Integration and interoperability are claimed in general terms, described as enabling generated notes to reach the record and as aggregating information from record systems, laboratory results and imaging. No named system, integration architecture, standard, certification or write back mechanism is published.

The gap is wide, because the claimed data flow runs both directions and reaches beyond documentation. Writing a note into a record is one capability. Reading laboratory results and imaging out of connected systems, aggregating them into a consolidated history and generating risk flags is a substantially deeper integration requiring broader access, and no mechanism for it is described at all.

That asymmetry between what is claimed and what is evidenced is the finding. Ingesting results and imaging from a record system requires either a permissioned interface with defined scopes, a data feed the institution configures, or access credentials the vendor holds. Those have very different security and audit properties, and nothing says which applies.

None of the basic questions has a published answer: which record systems are supported, by what mechanism, whether it is bidirectional, what scopes it requests, whose identity its reads and writes carry in the audit log, and who configures and maintains it.

No hosting region, residency option or subprocessor detail is published, and nothing names which model service processes encounters or what it retains. Delivery is cloud, with tablet based capture described for in clinic and telehealth use.

The upload based workflow gives the residency question a specific shape. Where recorded conversations are uploaded rather than streamed, audio files exist as objects in storage, and the questions become concrete: which region holds them, for how long, under whose encryption keys, and whether an administrator can see what has been uploaded.

The ingestion claims widen it further. A platform described as drawing from record systems, laboratory results and imaging is holding a broader clinical estate than encounter audio, and the residency question covers all of it rather than only recordings.

The model provider question is unanswered, and it carries particular weight for this product. A product asserting diagnostic recommendations is either running its own clinical model or building on an external foundation model with clinical prompting. Those are materially different propositions for a buyer assessing where clinical suggestions come from, what they were trained on, and who else sees the content. Nothing published distinguishes them.

Telehealth use adds a further consideration. Where a consultation is remote, the patient may be in a different jurisdiction from the clinician, and the recording captures a person who is not in the clinic. How the product handles cross border telehealth encounters is not stated.

No published rate, and the available statements conflict. The product is described as a free AI medical scribe in one place while every route to it is a demo booking, and a major software review site records that pricing details are not available.

A free claim without terms, alongside no published rate, gives a buyer nothing to plan against and is arguably less useful than saying nothing. Nothing published says what free covers, for how long, for how many users, or what happens at the boundary.

Neither a specialty count nor specialty tuning is published, and there is no note format list or supported language list.

Multilingual support and use in high pressure settings such as emergency departments are referenced in the vendor's general blog content rather than stated as product capability. That difference is not pedantic. A capability statement is something a buyer can hold a vendor to and a supplier can be asked to evidence. A passing reference in an article about the industry is neither, and this vendor's content mixes the two throughout.

So a buyer cannot currently establish the basic scoping facts: which specialties the product has been used in, which note formats it produces, which languages it handles, or whether templates exist for their own documentation requirements.

That is a more consequential gap for this product than for a narrow scribe, because of what it claims to do. A system offering diagnostic and treatment recommendations is making specialty dependent judgments, and the appropriate suggestion in primary care differs from the appropriate suggestion in oncology or psychiatry. Establishing which specialties the clinical layer has been developed and tested for is therefore a safety question rather than a fit question.

The emergency department reference deserves specific confirmation for the same reason, since that setting combines the hardest acoustic conditions with the highest consequence of a missed diagnosis.