HIPAA is here — Flow is now HIPAA-ready on Growth and Enterprise

Flow is now HIPAA-ready.
Growth and Enterprise, all devices.

Most people don’t think about privacy until something goes wrong.

But from day one, we did.

When we started building Flow, it wasn’t just about making dictation faster or smarter—it was about making it trustworthy. That meant privacy couldn’t be a feature. It had to be a foundation.

In recent months I’ve heard from founders in digital healthcare, research teams handling sensitive clinical data, and therapists documenting session notes—they have all wanted to use Flow, but without HIPAA compliance there were too many questions; would audio be stored? Transcribed? Used for training? Could they turn all of that off?

Now they can. And so can you.

As of today, Flow is fully HIPAA-ready with a signed BAA on Growth and Enterprise, across all devices. That means if you’re working with sensitive information, you can speak freely. Whether you’re a nurse taking notes, a founder in healthtech, or an executive reviewing protected data, Flow is built to meet the bar.

This builds on top of what we’ve already put in place:

• Data sharing off, paired with dictation cloud storage off, guarantees zero data retention for dictation data.
• SOC 2 Type II report, independently audited, available on every plan.
• No data selling, ever. Flow is free for everyone. We make money when heavy users choose to upgrade, not from your data.

We’ve passed the procurement tests of teams at Ramp, Superhuman, Mercury and Clay — places where security is non-negotiable. Now we meet the compliance standards of hospitals, labs, and clinics too.

Security should never slow you down. With Flow, it doesn’t.