Who this notice is for
This notice is for a patient or authorized substitute decision-maker considering a clinic’s request to use Porvio during or after an appointment. It is a Porvio-specific information layer. The clinic must identify itself, answer questions, assess capacity and authority, provide any additional notice required for the care, and obtain express, knowledgeable consent before encounter audio capture or AI processing of a clinician-only dictation begins.
Notice version: 2026-08-20.1. The clinician records this version with the consent event.
What Porvio does
If you agree, the clinic can use Porvio to record or upload encounter audio, or the clinician can make a clinician-only spoken recap after the appointment when you are not present. That recap can contain your health information, but only the clinician is intended to be audible. Speech-processing AI creates an unverified transcript. Text AI then receives that transcript, the clinic’s selected template, and limited patient context to create an editable documentation draft. A clinician may later request an unverified document-pack draft from finalized note content or an evidence summary from selected context.
Porvio does not diagnose, prescribe, order treatment, make a care decision, or transfer a note into an external health-record system. The clinic must ensure a qualified clinician checks and corrects the output before relying on it.
Information and outside providers
Encounter audio can contain your voice, other voices, symptoms, history, examination discussion, and anything else said while capture is on. A clinician-only recap contains the clinician’s voice and can include the same kinds of information about you. A drafting request can include the transcript, template instructions, date of birth, sex at birth, gender identity, allergies, medications, conditions, and clinical context. Names or contact details are not intentionally added to the structured drafting context, but can still be spoken or appear in free text.
Authorized clinic users can access the resulting record. Cloudflare provides hosting, security, application, database, and private-file services. OpenRouter and an underlying model provider route and process AI requests. These providers may process information outside Canada, where different laws and lawful-access rules can apply. Porvio does not promise end-to-end Canadian data residency.
Possible benefit and material risks
The intended benefit is to help the clinician prepare documentation for review. It is not guaranteed to save time or improve care.
- AI can omit, invent, merge, mishear, or misattribute information, including medication, allergy, dose, negation, speaker, date, anatomy, or laterality details.
- Performance can vary with language, accent, disability, voice, background noise, connection quality, and clinical context, and can reflect bias in training or assessment data.
- Audio capture, clinician dictation, and third-party processing create privacy, confidentiality, cybersecurity, cross-border-access, and retention risks even when safeguards are used.
How long the recording stays
The source recording is temporary. When the clinician finalizes the connected note, Porvio removes active access to the recording and requests its secure deletion. If the note is not finalized, Porvio does the same 30 days after the recording was successfully uploaded. Replacement audio starts a new 30-day period.
A scoped legal hold or applicable law may require temporary preservation. Cleanup retries, provider requests already in flight, and provider backup copies may follow their documented lifecycles. The transcript, reviewed note, consent evidence, and audit history are separate records and may remain under the clinic’s duties. Ask the clinic how the finalized note becomes part of your official record.
Your choice, refusal, and withdrawal
Agreeing is voluntary. Ask questions before deciding. You may refuse or withdraw without losing the same or similar care, and the clinic must offer another documentation method. For encounter audio, consent must also cover every other person whose voice will be captured where required. For clinician-only dictation, you do not need to be present or recorded, but your health information is still transcribed and used to create the draft.
Tell the clinic immediately if you withdraw. Further Porvio capture, clinician dictation, and AI processing under that consent must stop. Porvio stops capture on the recording device where withdrawal is entered, detaches server-held source audio, requests its deletion, and blocks later active processing results. Audio held in another browser, a cleanup retry, a backup lifecycle, or a provider request already in flight may not be immediately retractable. Transcripts, drafts, finalized records, consent evidence, and audit history already created may remain where the clinic has a lawful record-retention duty. Ask the clinic about access, correction, restriction, and its exact retention schedule.
A Porvio platform administrator may lock a clinic workspace for a documented security, privacy, clinical-safety, legal, or support reason. A lock stops ordinary workspace and AI access, but it does not cancel your right to refuse or withdraw. Tell the clinic even if Porvio is unavailable or locked; the clinic must stop further use, use the restricted withdrawal or audio-deletion path when available, and keep a non-AI documentation method available.
How the choice is recorded
The clinician selects whether the decision came from the patient or an authorized substitute decision-maker, the method (verbal, written, or digital), and confirms the current notice. Porvio records the notice version and fingerprint, server-owned attestation, clinician, and time in an append-only consent history while the encounter is retained. That checkbox documents the clinician’s attestation; it does not replace the conversation or constitute your consent by itself.
Questions, records, and complaints
Ask the treating clinic first about why it wants to use Porvio, its non-AI alternative, who will see the record, its retention schedule, access or correction, and how to complain. The clinic controls the clinical record and is normally best placed to verify your identity and respond.
For a Porvio privacy or product question, email support@porvio.app without including patient records. You may also contact the Information and Privacy Commissioner of Ontario.