Original research · Free with attribution

    The ANZ Health AI Vendor Trust Tracker

    What AI voice and ambient-scribe vendors serving Australian and New Zealand healthcare have published on their own public pages about data residency, model provenance, subprocessors, certifications and regulatory status — with a source URL and verbatim quote on every entry.

    Read this first: This tracker records only what each vendor has published on its own public pages. It is not an assessment, audit, certification or endorsement. Vendors change their documentation — always verify directly before making a procurement decision.
    Vendors tracked
    22
    Facts recorded
    211
    Sources cited
    113
    Last checked
    28 July 2026
    Why this exists

    Storage region and processing region are not the same thing.

    Data storage region and data processing / inference region are frequently different in AI systems. Under the Australian Privacy Act (APP 8) and the New Zealand Health Information Privacy Code, it is the processing location that creates cross-border disclosure obligations for a healthcare provider — not where the record eventually sits at rest.

    This tracker records both separately wherever a vendor publishes them, and shows a verbatim quote from the vendor's own page so you can read exactly what they said.

    What we track
    • · Data storage region
    • · Data processing region
    • · Model provenance
    • · Subprocessors
    • · Certifications
    • · TGA status
    • · PMS integrations
    • · ANZ entity
    • · Support hours

    A vendor can have multiple entries for the same field with different sources. We do not pick a winner — every source stands on its own.

    Filter22 of 22 vendors · sorted alphabetically
    AiDialVoice agent· HQ AU
    Data storage region
    Australia. Privacy policy states servers are primarily hosted within Australia; the same…
    Data processing region
    Australia, as stated on the healthcare product page.
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    Not disclosed / not found
    TGA status
    Not disclosed / not found
    PMS integrations
    Cliniko, Halaxy and PracSuite named, subject to available API access.
    ANZ entity
    DIGITALON Pty Ltd trading as AiDial, ABN 64 630 163 469.
    Support hours
    Not disclosed / not found
    Open all sources
    Amazon Connect (Amazon Web Services)Contact centre (CCaaS)· HQ US
    Data storage region
    AWS states the customer chooses the AWS Region(s) in which content is stored, and that AW…
    Data processing region
    Amazon Connect AI agents documentation states that cross-region inference automatically s…
    Model provenance
    Generative AI-powered post-contact summaries stated to be built on Amazon Bedrock. No ind…
    Subprocessors
    Public AWS sub-processor page published, organised into AWS infrastructure entities, AWS…
    Certifications
    Amazon Connect listed on the AWS HIPAA Eligible Services Reference. AWS states an AWS bus…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    AWS Contracting Party for Australia stated as Amazon Web Services Australia Pty Ltd (ABN:…
    Support hours
    Basic Support stated as 24/7 access to customer service, documentation, whitepapers and A…
    Open all sources
    Cisco Webex Contact CenterContact centre (CCaaS)· HQ US
    Data storage region
    Tenant created in the data center closest to the Country of Operation selected in the set…
    Data processing region
    The regional Data Security, Privacy and Residency article retrieved (Singapore region var…
    Model provenance
    Microsoft named as the third-party model provider for Webex generative AI features; Azure…
    Subprocessors
    ElevenLabs and Deepgram named as sub-processors for certain speech and transcription task…
    Certifications
    Webex stated as ISO/IEC 27001:2013 certified. The same page addresses GDPR and states Web…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    Cognigy (NiCE Cognigy)Voice agent· HQ DE
    Data storage region
    Documentation lists SaaS clusters by region: Europe (app.cognigy.ai), US (app-us.cognigy.…
    Data processing region
    Not disclosed / not found
    Model provenance
    Documentation lists selectable LLM providers: Platform-Provided LLM, Azure OpenAI, OpenAI…
    Subprocessors
    Not disclosed / not found
    Certifications
    Vendor announced completion of a SOC 2 Type II audit performed by KirkpatrickPrice. Other…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    Curious ThingVoice agent· HQ AU
    Data storage region
    No single storage region stated. Privacy policy states information may be transferred, pr…
    Data processing region
    No single processing region stated. Same clause states information may be transferred, pr…
    Model provenance
    ChatGPT named as powering the 'Alex' FAQ voice AI agent, combined with the company's own…
    Subprocessors
    Not disclosed / not found
    Certifications
    ISO 27001 certification and completion of a SOC 2 Type II audit stated; GDPR and HIPAA co…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Curious Thing Pty Ltd, Level 2, 477 Pitt Street, Sydney NSW 2000. The privacy policy also…
    Support hours
    Not disclosed / not found
    Open all sources
    DecagonVoice agent· HQ US
    Data storage region
    Not disclosed / not found
    Data processing region
    Not disclosed / not found
    Model provenance
    Security page names OpenAI and Anthropic as AI providers in the context of zero-day reten…
    Subprocessors
    Not disclosed / not found
    Certifications
    Vendor states SOC 2 Type II compliance and HIPAA options. Security page additionally disp…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    Five9Contact centre (CCaaS)· HQ US
    Data storage region
    Five9 states recordings can be kept in the customer's Core Edge (a home region running th…
    Data processing region
    Five9 states agents connect to the closest Voice Edge point of presence, keeping call pat…
    Model provenance
    Five9 Agent Assist 2.0 with AI Summary stated as powered by OpenAI.
    Subprocessors
    Not disclosed / not found
    Certifications
    Five9 states it acts as a HIPAA Business Associate and has implemented administrative, ph…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Five9 Support stated as available 24 hours per day, 365 days per year.
    Open all sources
    GenesysContact centre (CCaaS)· HQ US
    Data storage region
    Asia Pacific (Sydney), ap-southeast-2, listed as a Genesys Cloud core AWS region.
    Data processing region
    Transient recording file processing (encryption/decryption for playback, export) stated t…
    Model provenance
    Genesys Agent Copilot stated to use a combination of Genesys native models and AWS Bedroc…
    Subprocessors
    Named sub-processor list published. Companies appearing on the list include Amazon Web Se…
    Certifications
    Listed under Authorizations: IRAP Protected (also FedRAMP, GovRAMP, TX-RAMP, DoD Impact L…
    TGA status
    Not disclosed / not found
    PMS integrations
    Health CX stated as a native integration between the Genesys Cloud platform and the Epic…
    ANZ entity
    Offices listed for Australia (Sydney: WeWork, Level 1, 1 Sussex Street, Barangaroo, NSW 2…
    Support hours
    My Support Web Portal, Phone Support, Resource Center and eLearning stated as 24x7x365. R…
    Open all sources
    Healthengine ("Helen")Voice agent· HQ AU
    Data storage region
    Australia, stated for personal information held by Healthengine. The same policy states s…
    Data processing region
    Not disclosed / not found
    Model provenance
    Privacy policy names Open AI among third-party service providers supporting the AI virtua…
    Subprocessors
    No consolidated subprocessor register published. Third parties named in the privacy polic…
    Certifications
    ISO 27001 Certification for Information Security Management Systems, stated as earned in…
    TGA status
    Not disclosed / not found
    PMS integrations
    Best Practice and Pracsoft, stated on the Helen product page as the only compatible syste…
    ANZ entity
    Healthengine Limited, ACN 138 767 021. Postal address given as PO Box 7754, Cloisters Squ…
    Support hours
    Not disclosed / not found
    Open all sources
    Heidi HealthAmbient scribe· HQ AU
    Data storage region
    Australia — vendor states all its data is locally hosted within Australia (AU compliance…
    Data processing region
    Not disclosed / not found
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    ISO 27001, ISO 42001, SOC 2 stated as credentials; regional regulatory requirements state…
    TGA status
    Not disclosed / not found
    PMS integrations
    Named on vendor integrations page: Athenahealth, Gentu, MedicalDirector, MediRecords, Bes…
    ANZ entity
    Heidi Health Trading Pty Ltd, ABN 84 649 783 871, Level 30, 360 Elizabeth Street, Melbour…
    Support hours
    Not disclosed / not found
    Open all sources
    Data storage region
    Australia — stated as exclusive storage location for patient health information, audio, t…
    Data processing region
    Australia — vendor states processing occurs exclusively within Australia and that all AI…
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    ISO/IEC 27001:2022, certificate number 1446-I-1, issued 24 April 2026, expiring 23 April…
    TGA status
    Vendor states the product does not meet the definition of Software as a Medical Device (S…
    PMS integrations
    Named by vendor: Gentu (Magentus) live, Genie Solutions live, S4S / Shexie, BP VIP.net, D…
    ANZ entity
    Akuru Pty Ltd, ACN 673 517 578, ABN 66 673 517 578, incorporated in Australia, headquarte…
    Support hours
    Vendor states 24/7 Australian support, delivered onshore.
    Open all sources
    Lyngo AIVoice agent· HQ AU
    Data storage region
    No single storage region stated. The published sub-processor list names Microsoft Corpora…
    Data processing region
    No single processing region stated. The sub-processor list gives Location: United States…
    Model provenance
    Anthropic PBC and OpenAI, LLC listed for AI Language Model Services; Deepgram, Inc. for S…
    Subprocessors
    Published list of 19 named sub-processors (article dated February 9, 2026). Infrastructur…
    Certifications
    Policy hub displays compliance badge images with alt text 'GDPR compliant', 'Australian P…
    TGA status
    Not disclosed / not found
    PMS integrations
    Cliniko, Nookal and PracSuite listed as integrations; Splose shown with a 'coming soon' l…
    ANZ entity
    Sydney office address published: 24 Campbell Street, Haymarket, Sydney NSW 2000, Australi…
    Support hours
    Not disclosed / not found
    Open all sources
    Lyrebird HealthAmbient scribe· HQ AU
    Data storage region
    Australia — AWS Asia-Pacific (Sydney) region, stated for application databases, transcrip…
    Data processing region
    Help centre article (dated May 2024) states transcription is performed in real time on th…
    Model provenance
    Azure OpenAI (Microsoft) stated for language processing; Deepgram and Whisper stated for…
    Subprocessors
    Named in privacy policy: Azure OpenAI (Microsoft), Deepgram, Whisper, AWS, Supabase, Sent…
    Certifications
    ISO 27001 certification announced by the vendor on 6 July 2026. Vendor states alignment w…
    TGA status
    Vendor states it is exempt from TGA Software as a Medical Device regulation.
    PMS integrations
    Named on vendor integrations page: Bp Premier (Best Practice), BetterConsult, Cubiko, Epi…
    ANZ entity
    Subsidio Pty Ltd, ABN 57 668 121 248 (named as the policy owner entity in the Lyrebird He…
    Support hours
    Not disclosed / not found
    Open all sources
    Microsoft Azure AIPlatform / infrastructure· HQ US
    Data storage region
    Azure Speech: data is stored only in the region where the Speech resource was created. Au…
    Data processing region
    Azure Speech: processing occurs only in the region of the Speech resource. Australia East…
    Model provenance
    Foundry 'models sold by Azure' includes Azure OpenAI models. Azure Speech region tables a…
    Subprocessors
    Microsoft publishes a Microsoft Online Services Subprocessors List identifying subprocess…
    Certifications
    ISO/IEC 27001 and HITRUST CSF: BAA-covered Microsoft services are audited by accredited i…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    MICROSOFT PTY LTD, ABN 29 002 589 460, Australian Private Company, ABN active from 01 Apr…
    Support hours
    Published response-time targets on paid plans include: Minimal business impact (Sev C) wi…
    Open all sources
    NablaAmbient scribe· HQ FR
    Data storage region
    Hosted on Google Cloud Platform; database location selected at organization creation time.
    Data processing region
    Trust Center subprocessor table states Azure speech-to-text operations occur in U.S. Regi…
    Model provenance
    Not disclosed / not found
    Subprocessors
    3 subprocessors published on the Trust Center: Google Cloud (Infrastructure Hosting), Azu…
    Certifications
    Trust Center Compliance section lists: SOC 2 Type 2, ISO 27001, HIPAA, CCPA, Texas RAMP,…
    TGA status
    Not disclosed / not found
    PMS integrations
    Epic — Nabla states it was added to Epic Toolbox for Ambient Voice Recognition and can be…
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    ParloaVoice agent· HQ DE
    Data storage region
    Vendor states regional data centres across North America, Europe and Asia-Pacific with da…
    Data processing region
    Text-to-speech processing region is selectable between EU and US per agent (ElevenLabs EU…
    Model provenance
    ElevenLabs named as a voice/TTS provider requiring subprocessor acceptance; Microsoft nam…
    Subprocessors
    Trust centre published a subprocessor list of five entries as rendered on 2026-07-28: Twi…
    Certifications
    Trust centre lists: ISO/IEC 27001:2022, ISO 17442:2020, SOC 2 Type 1, SOC 2 Type 2, PCI D…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    PolyAIVoice agent· HQ GB
    Data storage region
    Platform documentation names US, UK and EU regions with region-specific hosts, and states…
    Data processing region
    Not disclosed / not found
    Model provenance
    Vendor states it uses Amazon SageMaker to train and fine-tune speech recognition, LLM and…
    Subprocessors
    Not disclosed / not found
    Certifications
    ISO/IEC 27001 certified; SOC 2 Type II; UK NCSC Cyber Essentials and Cyber Essentials Plu…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    SierraVoice agent· HQ US
    Data storage region
    General privacy policy states personal information may be transferred, processed and stor…
    Data processing region
    Not disclosed / not found
    Model provenance
    Vendor states agents are built on a combination of frontier, open-weight and proprietary…
    Subprocessors
    Not disclosed / not found
    Certifications
    Vendor states compliance standards including SOC 2, HIPAA, GDPR, PCI, FedRAMP High, CCPA,…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    Sophiie AIVoice agent· HQ AU
    Data storage region
    Not disclosed / not found
    Data processing region
    Not disclosed / not found
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    Privacy policy states the company maintains alignment with ISO 27001 compliance standards…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Sophiie AI Pty Ltd, ACN 679 849 453. Office address stated on contact page: Suite 6A, 50…
    Support hours
    Mon-Fri 9am to 5pm, stated on the contact page next to sales and existing-customer suppor…
    Open all sources
    SukiAmbient scribe· HQ US
    Data storage region
    United States — website privacy policy states Personal Data may be transferred to Company…
    Data processing region
    Not disclosed / not found
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    SOC2 Type 2 certified; HIPAA compliant (as stated on suki.ai home page). Suki also links…
    TGA status
    Not disclosed / not found
    PMS integrations
    Integrations page headline names: Epic, athena, Oracle & MEDITECH
    ANZ entity
    Not disclosed / not found
    Support hours
    Not disclosed / not found
    Open all sources
    VoiceStack (by CareStack)Voice agent· HQ US
    Data storage region
    Australian privacy policy states personal information may be stored on servers located in…
    Data processing region
    Not disclosed / not found
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    AU site states Australian Privacy Principles, HIPAA standards, SOC 2, PCI and ISO 27001 c…
    TGA status
    Not disclosed / not found
    PMS integrations
    AU page integrations section lists CareStack, Zavy 360, Google Analytics, Google Ads, Hub…
    ANZ entity
    Good Methods Pty Ltd, ACN 664 796 310, Level 6, 200 Adelaide Street, Brisbane City, Queen…
    Support hours
    Not disclosed / not found
    Open all sources
    VoxworksVoice agent· HQ AU
    Data storage region
    Amazon Web Services Sydney (ap-southeast-2) region, stated for platform storage including…
    Data processing region
    Not disclosed / not found
    Model provenance
    Not disclosed / not found
    Subprocessors
    Not disclosed / not found
    Certifications
    Security documentation states the company aligns its security practices with ISO 27001; n…
    TGA status
    Not disclosed / not found
    PMS integrations
    Not disclosed / not found
    ANZ entity
    Voxworks Technologies Pty Ltd, stated as incorporated and headquartered in Australia; ABN…
    Support hours
    Not disclosed / not found
    Open all sources

    Values shown are truncated for the matrix. Click any cell to see the full statement, the verbatim quote from the vendor's page, the source URL, and the date checked.Not disclosed / not found” — We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

    Change log

    Recent changes

    When a vendor updates a statement on the same page, we record the old value → new value with both check dates. Vendors move fast — this is the audit trail.

    No changes recorded yet. This log populates automatically as we re-check vendor pages.
    Right of reply

    Submit a correction

    Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.

    • · Corrections address: hello@gocadence.ai
    • · We verify against the source URL you provide and credit it in the update.
    • · If the change is material we note it in the public change log above.
    Correction form
    Method & limits

    How we do this — and what it isn't

    Sources. Vendor trust centres, security pages, privacy policies, subprocessor lists, DPAs, product documentation and official registers. Not blogs. Not competitor claims. Not press releases.

    Robots & access. We respect robots.txt. Where a vendor's pages disallow automated access, we record that and do not work around it.

    Point-in-time. Every entry carries the date it was checked. Vendors update documentation frequently — an entry is a snapshot of what a specific page said on a specific day.

    Absence. We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.

    No scoring, no ranking. This is a reference, not a scorecard. We do not compute a “transparency score”, a grade, a star rating or a percentage-complete. Vendors are listed alphabetically. We do not rank them.

    Corrections. Any vendor or their representative can submit a correction using the form above. Corrections are typically actioned within 2 business days.

    Independence. Cadence is paid the same success fee regardless of which platform a client selects. We take no vendor funding and no affiliate commissions. No vendor pays to appear in or be omitted from this tracker.

    Choosing between vendors is a different job.

    This tracker records what vendors have said. If you need help deciding which vendor to sign — inside your specific network, integrations and risk posture — that is what our advisory engagements are for.

    Book a 30-minute fit call