Last Updated: October 1st 2026
Welcome to ScribeMD.ai. These Terms of Service ("Terms" or "Agreement") govern the use of the ScribeMD.ai AI medical scribe service (the "Service") by customers established in the European Union or the European Economic Area. The Service is provided by EE Dojo, Inc. (D/B/A ScribeMD.ai), a California-based corporation ("ScribeMD.ai", "we", "us"). The Service is offered exclusively to healthcare professionals and healthcare organisations acting in a professional capacity ("Customer", "you"), and not to consumers.
By clicking a box indicating your acceptance, or by accessing or using the Service, you agree to these Terms. If you accept on behalf of an entity, you represent and warrant that (i) you are authorised to bind that entity, and (ii) the entity has full power to enter into this Agreement and perform its obligations. If you do not agree to these Terms, please do not use the Service.
We may update these Terms from time to time. We will give you reasonable advance notice, and at least thirty (30) days' written notice, of any material change before it takes effect. If you object to a material change, you may terminate the Agreement before the change takes effect. Changes affecting the processing of personal data will be made only in accordance with the Data Processing Agreement in the Appendix.
Subject to this Agreement and payment of all fees due, during the Subscription Term we will provide you with access to our AI medical scribe, which allows clinicians to record or dictate patient consultations and which transcribes them and generates draft clinical notes, letters, billing codes and related documentation, together with any related application programming interface (API).
ScribeMD.ai grants you a limited, non-exclusive, non-sublicensable, non-transferable (except for permitted assignments) right to access and use the Service solely for your internal professional purposes during the Subscription Term. All rights not expressly granted are reserved by ScribeMD.ai and its licensors.
You represent that: (a) you are a healthcare professional or organisation with the necessary rights and authority to enter into this Agreement; (b) your use of the Service and any data you provide will comply with the GDPR and applicable EU and Member State law, including rules on professional secrecy; (c) you have a valid legal basis under Articles 6 and 9 GDPR for processing patient data through the Service, have informed patients as required by Articles 13 and 14 GDPR, and have obtained patient consent where required by applicable local law (including any consent required for recording consultations); and (d) you will not infringe the rights of any third party in your use of the Service.
You shall not (and shall not allow any third party to): (a) use the Service other than in its normal operation or as specified in this Agreement; (b) modify, reverse engineer, decompile or disassemble any software associated with the Service, except to the extent such restriction is prohibited by applicable law; (c) use any unauthorised automated means to access, scrape or data-mine the Service; (d) frame or mirror any part of the Service; or (e) access the Service to build a competing product. You shall keep all passwords and API keys secure, are responsible for all use made of them, and shall notify us promptly of any actual or suspected unauthorised use.
All output generated by the Service, including transcriptions, clinical notes, letters and billing codes, is a draft produced with the assistance of artificial intelligence and may contain errors or omissions. The clinician must review, correct where necessary and approve all output before relying on it or adding it to a patient record, and remains solely responsible for the content of the clinical record and for all clinical decisions. The Service is a documentation tool and is not intended to provide diagnosis or treatment decisions. In line with the transparency obligations of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), we make clear to users that content is AI-generated.
We offer local data hosting options so that Customer Data, including patient health data, can be stored in the Customer's own region. Where a local hosting option is agreed in writing between you and ScribeMD.ai, your Customer Data will be stored in the agreed region. For any specific question about hosting, data location or these documents, please contact contact@scribemd.ai.
Customers with paid subscriptions shall pay invoices in accordance with their terms. Except where required by applicable law or expressly stated otherwise, fees are non-refundable and no refunds or credits are issued for partial periods of service.
ScribeMD.ai may increase its fees by giving at least thirty (30) days' advance written notice. Fee increases take effect only from the start of the next Subscription Term, and you may terminate before the increase takes effect.
All fees are exclusive of value added tax (VAT) and other applicable taxes. Where the reverse-charge mechanism applies to the supply, you are responsible for accounting for VAT in your Member State, and you shall provide a valid VAT identification number on request. You are responsible for all other applicable taxes, excluding taxes on ScribeMD.ai's income.
We use commercially reasonable efforts to ensure high availability of the Service but do not guarantee uninterrupted availability, for example during maintenance or events beyond our reasonable control.
Subject to Section 8.4, neither party shall be liable for any indirect or consequential loss, or for loss of profits, revenue or goodwill, arising out of or related to this Agreement.
Subject to Section 8.4, each party's total liability arising out of or related to this Agreement, whether in contract, tort (including negligence) or otherwise, shall not exceed the total fees paid or payable by you to ScribeMD.ai in the twelve (12) months preceding the event giving rise to the claim.
Nothing in this Agreement limits or excludes either party's liability for: (a) intentional misconduct (intent) or gross negligence; (b) death or personal injury caused by negligence; (c) fraud or fraudulent misrepresentation; or (d) any other liability that cannot be limited or excluded under applicable law.
The subscription renews automatically at the end of each Subscription Term for the same period unless cancelled. You may cancel at any time by written notice to ScribeMD.ai, effective at the end of the current Subscription Term.
Either party may terminate this Agreement by written notice if the other party commits a material breach that is not remedied within thirty (30) days of written notice. ScribeMD.ai may suspend access immediately where reasonably necessary to prevent serious harm to the Service, other users or data subjects, and will notify you promptly.
Where the Service is provided free of charge, ScribeMD.ai may terminate access on reasonable notice.
On termination, your right to use the Service ends. Before termination takes effect you may export your Customer Data using the Service's export functions or by contacting us. Following termination, ScribeMD.ai will delete or return Customer Data in accordance with your instructions and the Data Processing Agreement, unless EU or Member State law requires its retention. Provisions which by their nature should survive termination shall survive.
"Customer Data" means all data that you or your End Users (your employees, contractors and other persons you authorise to use the Service) input into or generate through the Service, including patient data. You retain all rights in Customer Data. ScribeMD.ai processes Customer Data only to provide the Service and as set out in the Data Processing Agreement. ScribeMD.ai does not sell Customer Data and does not use identifiable patient data to train AI models.
ScribeMD.ai may create aggregated and anonymised statistics from the use of the Service, which may be used and disclosed only where no individual, Customer or case can be identified, directly or indirectly.
You shall not upload Customer Data that is unlawful, infringes third-party rights, contains malicious code, or that you are not entitled to process under applicable law.
To the extent permitted by applicable law, and without prejudice to any statutory rights that cannot be excluded, the Service is provided "as is" and ScribeMD.ai disclaims all other warranties, express or implied, including warranties of fitness for a particular purpose and that the Service will be uninterrupted or error-free, or that AI-generated output will be accurate or complete. ScribeMD.ai relies on third-party sub-processors (hosting provider, AI and language-processing providers, and a payment processor) and remains responsible for ensuring they are contractually bound by data protection obligations no less protective than those in this Agreement.
ScribeMD.ai shall defend and indemnify you against third-party claims to the extent the Service infringes a third party's intellectual property rights.
You shall defend and indemnify ScribeMD.ai against third-party claims to the extent arising from Customer Data, from your breach of Section 2.3 or applicable law, or from clinical decisions made using the Service.
The indemnified party shall give prompt written notice of the claim, allow the indemnifying party to control its defence and settlement, and reasonably cooperate. No settlement imposing obligations on the indemnified party may be made without its prior written consent, not to be unreasonably withheld.
This Agreement and any dispute arising out of or in connection with it shall be governed by the law of the EU or EEA Member State in which the Customer is established, and the courts of that Member State shall have jurisdiction, without prejudice to any mandatory provisions of applicable law.
EE Dojo, Inc. (D/B/A ScribeMD.ai)
10000 Washington Blvd, Suite 607
Culver City, CA 90232, USA
Email: contact@scribemd.ai
Last Updated: October 1st 2026
This Data Processing Agreement ("DPA") forms part of the Terms of Service between the Customer (as controller) and EE Dojo, Inc. (D/B/A ScribeMD.ai) (as processor) and applies to all personal data processed by ScribeMD.ai on behalf of the Customer. Terms such as "personal data", "processing", "controller", "processor", "data subject" and "personal data breach" have the meanings given in the GDPR.
ScribeMD.ai shall process personal data only on the Customer's documented instructions, including with regard to transfers to a third country, unless required to do so by EU or Member State law, in which case ScribeMD.ai shall inform the Customer of that legal requirement before processing, unless that law prohibits such information. The Agreement, this DPA and the Customer's configuration of the Service constitute the Customer's documented instructions. ScribeMD.ai shall immediately inform the Customer if, in its opinion, an instruction infringes the GDPR or other EU or Member State data protection provisions.
ScribeMD.ai shall ensure that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality, and that access is limited to authorised personnel who need it to provide the Service.
ScribeMD.ai shall implement all measures required under Article 32 GDPR, including encryption of personal data in transit and at rest, access controls restricting access to authorised personnel, measures to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems, the ability to restore availability and access in a timely manner, and regular testing and evaluation of the effectiveness of these measures.
The Customer grants ScribeMD.ai general written authorisation to engage sub-processors. The current categories of sub-processors are: hosting provider (Amazon Web Services), AI and language-processing providers (speech-to-text and large language models), and a payment processor. ScribeMD.ai shall inform the Customer in advance of any intended addition or replacement of sub-processors, giving the Customer a reasonable opportunity to object on reasonable data protection grounds. If the parties cannot resolve the objection in good faith, the Customer may terminate the affected part of the Service without penalty. ScribeMD.ai shall impose on each sub-processor, by written contract, data protection obligations no less protective than those in this DPA, providing sufficient guarantees to implement appropriate technical and organisational measures, and shall remain fully liable to the Customer for the performance of each sub-processor's obligations.
ScribeMD.ai shall transfer personal data outside the EU/EEA only in compliance with Chapter V GDPR, on the basis of an adequacy decision or the Standard Contractual Clauses adopted by Commission Implementing Decision (EU) 2021/914, which are incorporated by reference where required. Where a recipient is certified under the EU–US Data Privacy Framework, the corresponding adequacy decision may be relied upon for transfers to that recipient. ScribeMD.ai shall support transfer impact assessments and apply supplementary measures, including encryption. Where a local data hosting option has been agreed in writing, personal data shall be stored in the agreed region.
7.1. Data Subject Rights: Taking into account the nature of the processing, ScribeMD.ai shall assist the Customer by appropriate technical and organisational measures, insofar as possible, in fulfilling the Customer's obligation to respond to requests from data subjects exercising their rights under Chapter III GDPR. ScribeMD.ai shall promptly forward to the Customer any request it receives directly from a data subject and shall not respond except on the Customer's instructions.
7.2. Compliance Obligations: ScribeMD.ai shall assist the Customer in ensuring compliance with Articles 32 to 36 GDPR (security, breach notification, data protection impact assessments and prior consultation), taking into account the nature of processing and the information available to ScribeMD.ai.
7.3. Personal Data Breaches: ScribeMD.ai shall notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer personal data, and shall provide the information required by Article 33(3) GDPR as it becomes available, so that the Customer can meet its obligation to notify the supervisory authority within 72 hours and, where required, to communicate the breach to data subjects. ScribeMD.ai shall take reasonable steps to contain and mitigate the breach.
At the Customer's choice, ScribeMD.ai shall delete or return all personal data to the Customer after the end of the provision of the Service, and delete existing copies, unless EU or Member State law requires storage of the personal data. During the term, personal data is retained in accordance with the Customer's configuration and instructions. This obligation extends to personal data held by sub-processors.
ScribeMD.ai shall make available to the Customer all information necessary to demonstrate compliance with Article 28 GDPR and this DPA, and shall allow for and contribute to audits, including inspections, conducted by the Customer or another auditor mandated by the Customer, on reasonable prior written notice, during normal business hours and subject to appropriate confidentiality obligations.
The Customer shall ensure that it has a lawful basis under Articles 6 and 9 GDPR for the processing, that its instructions comply with applicable law, that data subjects have been informed as required by Articles 13 and 14 GDPR, and that any consent required by applicable Member State law (including for the recording of consultations) has been obtained. The Customer shall inform ScribeMD.ai of any applicable Member State law restrictions that affect the processing.
11.1. Precedence: In the event of a conflict between this DPA and the Terms of Service, this DPA prevails with respect to the processing of personal data. Where the Standard Contractual Clauses apply, they prevail over this DPA.
11.2. Liability: Each party's liability under this DPA is subject to the limitations and exclusions in the Terms of Service, without prejudice to the rights of data subjects under the GDPR.
11.3. Survival: This DPA remains in effect for as long as ScribeMD.ai processes personal data on behalf of the Customer.
11.4. Contact: All questions and requests relating to this DPA should be sent to contact@scribemd.ai.
