HIPAA is here

Flow is now HIPAA compliant.
All plans, all devices.

Most people don’t think about privacy until something goes wrong.

But from day one, we did.

When we started building Flow, it wasn’t just about making dictation faster or smarter—it was about making it trustworthy. That meant privacy couldn’t be a feature. It had to be a foundation.

In recent months I’ve heard from founders in digital healthcare, research teams handling sensitive clinical data, and therapists documenting session notes—they have all wanted to use Flow, but without HIPAA compliance there were too many questions; would audio be stored? Transcribed? Used for training? Could they turn all of that off?

Now they can. And so can you.

As of today, Flow is fully HIPAA compliant—across all plans and all devices. That means if you’re working with sensitive information, you can speak freely. Whether you’re a nurse taking notes, a founder in healthtech, or an executive reviewing protected data, Flow is built to meet the bar.

This builds on top of what we’ve already put in place:

• Privacy Mode, with Zero Data Retention. When it’s on, Flow stores nothing.
• SOC 2 Type II certification, independently audited, for Enterprise users.
• No data selling. We make money from subscriptions, not surveillance.

We’ve passed the procurement tests of teams at Ramp, Superhuman, Mercury and Clay — places where security is non-negotiable. Now we meet the compliance standards of hospitals, labs, and clinics too.

Security should never slow you down. With Flow, it doesn’t.