Trust & data

You are about to put participant information into a tool built by a small Australian company you have not heard of. This page exists so you can make that decision on facts. It includes the things we have not finished yet, because a trust page that only lists wins is not a trust page.

Last reviewed 4 August 2026.

True today

Every item here is in production right now and you can verify it in the product.

A human approves every note

ShiftNote never finalises or submits anything. Every output is a draft, and the worker confirms a short review checklist before a note can be copied, downloaded or exported. The worker stays the author and stays responsible.

Your notes are never used to train AI models

Notes are sent to Anthropic’s API to produce a draft and are not used for model training, by us or by them. We do not sell, share or licence note content to anyone.

Participant data never reaches our analytics

No note content, participant reference, diagnosis, medication detail or incident description is sent to PostHog or any other analytics tool. We record privacy-safe usage events only — note created, note copied, template updated.

You are warned before you paste identifying details

The note editor scans what you type and warns you if it looks like a full name, address, phone number or other identifying detail, before anything is generated.

Row-level security on every table

Access is enforced in the database itself, not just in application code. A worker can only read their own notes; a provider admin can only read their own organisation’s data.

Voice recordings are deleted on a retention schedule

Recordings are removed automatically once they are no longer needed, rather than accumulating indefinitely.

Australian data residency

Our database runs in the ap-southeast-2 (Sydney) region, migrated 2026-08-06. This was the last item on our procurement checklist that we could not say yes to — now we can.

Not true yet

These matter, they are not done, and we are telling you before you ask.

Seven-year retention with an immutable audit trail

Voice recordings already have a retention schedule; notes do not yet, and edits currently overwrite in place rather than building a tamper-evident history. Both are on the build plan alongside the evidence layer, because an evidence pack is only worth what its audit trail is worth.

Things we will never claim

Where the industry tends to overstate, and where we have decided not to.

We will never say we guarantee NDIS compliance

No tool can. ShiftNote produces drafts and heuristic scores that a human reviews. Anything that claims to guarantee a regulator’s verdict is selling you something it cannot deliver.

We will never say the evidence score is a legal determination

It is a heuristic that reads a note against the claim it supports and shows you where the gaps are. It is designed to be useful, not authoritative, and it does not decide whether something is reportable, claimable or defensible.

We will never mark a feature as shipped before it is

Anything on our site marked “early access” is something we run with you manually rather than something you can self-serve. We would rather lose a deal than win one on a capability we do not have.

Something here not good enough?

If your procurement process needs an answer this page does not give you, ask us directly. A straight answer, including “not yet”, is faster for both of us than a security questionnaire.

shiftnoteai@gmail.com

See also our Privacy Policy and Terms of Service.