Clinical record security & Privacy Act compliance

Built to hold clinical records properly

Counselling records are sensitive health information. Here's specifically how Zenvia stores, protects and gives you control over them.

Australian hosting

Client data stays onshore, encrypted in transit and at rest.

Privacy Act aligned

Consent capture, retention rules and record access built to Australian Privacy Principle obligations.

You own your records

Export your full client file set any time, in a readable format.

Audit trail

Every note edit, access event and disclosure logged for supervision and insurance.

In detail

How your data is actually handled

Where data lives

Client records, notes and uploaded files are stored on infrastructure in Australia. Data is encrypted in transit (TLS) and at rest.

AI session notes and overseas processing

Producing an AI-drafted session note involves sending session audio or notes to a third-party AI model provider for processing — this is the one point in the workflow where data may be processed outside Australia, which is why we're explicit about it here rather than only in the privacy policy. That data is contractually excluded from being used to train models, is not retained by the provider beyond producing your draft, and audio is deleted from Zenvia once the draft note is generated. Only the reviewed, signed note stays in the client's record. See how AI session notes work for the full workflow.

Access control

Practitioners see their own clients; group-practice admins and reception roles have separately scoped access matched to what their role actually needs. Every access to a client record and every edit to a session note is logged.

Backups and availability

Client data is backed up regularly, with backups encrypted the same way as live data.

Your control over the data

Export your full client file set at any time, in a readable format, whether you're staying or switching to another system. There's no exit fee and no lock-in — see our pricing page for the full terms.

This page is a plain-language summary. Our privacy policy is the governing document for how we handle personal information under the Privacy Act 1988 (Cth). If you have specific compliance questions for your practice or insurer, contact us directly.

Questions before you sign up?

Ask us directly — especially if you need something specific for your professional body or insurer.

Contact us