Legal & Compliance
Everything in one place. Merza Medical (“Alfred”) is a HIPAA-compliant AI medical scribe. Under HIPAA we are a Business Associate — we handle patient information on behalf of the clinician, who is the Covered Entity.
Privacy Policy
How we collect, use, disclose, and protect information — and your privacy choices. Patient data is handled under our Business Associate Agreement; this policy is not your clinic's Notice of Privacy Practices.
Read the Privacy PolicyTerms of Service
The rules for using Alfred: eligibility, licenses, fees, acceptable use, the AI-output disclaimer (every note is a draft you review and sign), and your responsibility to obtain patient recording consent.
Read the TermsProvided during onboarding
Our Business Associate Agreement (BAA), patient data request procedures, staff-data privacy notice, and full HIPAA compliance package are shared with clinics and enterprise reviewers during onboarding or on request (the BAA and compliance materials under NDA). Email admin@merzamedical.com to request them.
Two things worth remembering
- We are the Business Associate; the clinician is the Covered Entity. Patients direct record requests, and questions about their care, to their clinician first. We support the clinician’s HIPAA duties behind the scenes.
- Alfred writes drafts, not final records. Every note, code, and summary is a draft the licensed clinician must review, edit, and sign. The clinician remains responsible for the final record.
This page is informational and is not legal advice. Where it differs from a signed agreement (such as the Business Associate Agreement) or a full policy, that document controls. Questions: admin@merzamedical.com.