Corti

    Ambient scribeHQ · DKWebsite As at 13 Aug 2026
    Trust alerts

    Get notified when Corti's published disclosures change

    We re-check published residency, subprocessor and certification pages and log every change. One email when something we track changes — nothing else.

    Email only. Unsubscribe in one click from any email. We never share the list with vendors.

    This tracker records only what each vendor has published on its own public pages. It is not an assessment, audit, certification or endorsement. Vendors change their documentation — always verify directly before making a procurement decision.

    Data storage region

    ValueChecked 13 Aug 2026
    EU or US hosting options, stated with no cross-border transfer
    Data hosting options in the EU or US with no cross-border transfer
    corti.ai

    Data processing region

    ValueChecked 13 Aug 2026
    Privacy policy states data may be transferred to and processed in Denmark; Corti Inc./Corti America Inc. certified under EU-U.S. Data Privacy Framework for US transfers
    we may transfer the data, including Personal Data, to Denmark and process it there
    corti.ai
    ValueChecked 13 Aug 2026
    AI processing within the EU per subprocessor list: Scaleway (France, Netherlands, Germany, Sweden) EU-only; DCAI (Denmark) for inference/training; Microsoft Azure hosting EU (Netherlands, Ireland, Sweden) and US
    Cloud infrastructure provider used for AI processing activities within the EU only
    corti.ai

    Model provenance

    ValueChecked 13 Aug 2026
    Corti states its models are trained only on healthcare data
    Trained only on healthcare data - no internet noise
    corti.ai
    ValueChecked 13 Aug 2026
    Own healthcare model family 'Symphony' offered via API
    Symphony powers speech, documentation, coding, and reasoning through one API
    corti.ai

    Subprocessors

    ValueChecked 13 Aug 2026
    Per-product list (updated 7 Aug 2026): Microsoft Azure (EU: NL/IE/SE; US), Scaleway (FR/NL/DE/SE), DCAI (Denmark), Speechmatics (Ireland), Datadog (Germany), PostHog (Germany), Mixpanel (Netherlands), Intercom (Ireland), Stripe (Ireland), Supabase (Sweden), Corti America (US), Corti AI UK (UK)
    Inference, Training, AI processing, GPU capacity
    corti.ai

    Certifications

    ValueChecked 13 Aug 2026
    HIPAA, GDPR, SOC 2, ISO 27001 stated; badge logos also displayed for ISO 13485, ISO 42001, ISO 27017, ISO 27018, ISO 14971, ISO 62366, CE, NHS DSPT/DTAC/DCB0129, Cyber Essentials Plus, EU AI Act, NIS2, DORA, ISAE 3000, BSI C5, US FedRAMP
    Corti delivers healthcare-grade security with built-in compliance for HIPAA, GDPR, SOC2, ISO 27001, and more.
    corti.ai

    TGA status

    ValueChecked 13 Aug 2026
    Not disclosed / not found
    We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.
    corti.ai

    PMS integrations

    ValueChecked 13 Aug 2026
    Not disclosed / not found
    We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.
    corti.ai

    ANZ entity

    ValueChecked 13 Aug 2026
    Not disclosed / not found
    We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.
    corti.ai

    Support hours

    ValueChecked 13 Aug 2026
    Not disclosed / not found
    We could not find this published on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or failed to disclose it.
    corti.ai
    Common questions

    What Corti publishes — answered from the record

    Where does Corti store patient data?
    ValueChecked 13 Aug 2026
    EU or US hosting options, stated with no cross-border transfer
    Data hosting options in the EU or US with no cross-border transfer
    corti.ai

    Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

    Where does Corti process data?
    ValueChecked 13 Aug 2026
    Privacy policy states data may be transferred to and processed in Denmark; Corti Inc./Corti America Inc. certified under EU-U.S. Data Privacy Framework for US transfers
    we may transfer the data, including Personal Data, to Denmark and process it there
    corti.ai
    ValueChecked 13 Aug 2026
    AI processing within the EU per subprocessor list: Scaleway (France, Netherlands, Germany, Sweden) EU-only; DCAI (Denmark) for inference/training; Microsoft Azure hosting EU (Netherlands, Ireland, Sweden) and US
    Cloud infrastructure provider used for AI processing activities within the EU only
    corti.ai

    Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

    Which AI models does Corti use?
    ValueChecked 13 Aug 2026
    Corti states its models are trained only on healthcare data
    Trained only on healthcare data - no internet noise
    corti.ai
    ValueChecked 13 Aug 2026
    Own healthcare model family 'Symphony' offered via API
    Symphony powers speech, documentation, coding, and reasoning through one API
    corti.ai

    Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

    What certifications does Corti publish?
    ValueChecked 13 Aug 2026
    HIPAA, GDPR, SOC 2, ISO 27001 stated; badge logos also displayed for ISO 13485, ISO 42001, ISO 27017, ISO 27018, ISO 14971, ISO 62366, CE, NHS DSPT/DTAC/DCB0129, Cyber Essentials Plus, EU AI Act, NIS2, DORA, ISAE 3000, BSI C5, US FedRAMP
    Corti delivers healthcare-grade security with built-in compliance for HIPAA, GDPR, SOC2, ISO 27001, and more.
    corti.ai

    Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.

    Planned professional tier
    20 founding places

    The Assurance Register — for teams who have to prove their diligence

    The public tracker stays free — it always will. For organisations that need more, we’re building a professional tier: monitoring of your vendor list, change alerts with the evidence attached, audit-ready packs formatted for privacy impact assessments and automated-decision disclosures, and a quarterly analyst briefing.

    From December 2026, the Privacy Act requires organisations to disclose automated decision-making in their privacy policies (Privacy and Other Legislation Amendment Act 2024, ADM transparency provisions) — which means knowing, on an ongoing basis, exactly what your AI vendors run and where. That’s what this register is for.

    Founding membership is limited to the first 20 organisations and locks founding pricing permanently. Register interest now — founding members get first access and shape what we build.

    Registering interest is not a purchase or commitment. The free public tracker is unchanged.

    Right of reply

    Something wrong or out of date?

    Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.

    Submit a correction