Question 1

Where does Lyrebird Health store patient data?

Accepted Answer

Australia (all patient data) Published statement: "All patient data is processed and stored within Australia, aligned with Australian Privacy Principles and local healthcare expectations." (source: https://www.lyrebirdhealth.com/au/compliance, checked 2026-09-25). Australia — AWS Asia-Pacific (Sydney) region, stated for application databases, transcripts, authentication and user data, speech processing and encrypted backups. Published statement: "remains stored in Australia (AWS Asia-Pacific Sydney region) and is not transferred overseas" (source: https://www.lyrebirdhealth.com/au/legal/privacy-policy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does Lyrebird Health process data?

Accepted Answer

Privacy policy lists overseas transfers to the United States for payment processing (Stripe), system monitoring (Sentry, Honeycomb) and website analytics (Segment), and says all other personal information, including transcripts and speech processing, remains stored in Australia (AWS Asia-Pacific Sydney region) and is not transferred overseas. It names Azure OpenAI (Microsoft) for language processing; no processing location for it is stated on the page checked. Published statement: "Specifically, your information may be transferred overseas to: United States: Stripe for payment processing … Speech processing … remains stored in Australia (AWS Asia-Pacific Sydney region) and is not transferred overseas." (source: https://www.lyrebirdhealth.com/au/legal/privacy-policy, checked 2026-09-25). Help centre article (dated 13 August 2026) states all transcription is performed in real time on servers located in the user's region, and that data is processed and stored within the region it originates from. Published statement: "We perform all transcription in real time, on servers located in your region, so audio is turned into text during the consult and is never permanently stored." (source: https://help.lyrebirdhealth.com/en/articles/8738063-privacy-and-security-overview, checked 2026-09-25). Vendor states all patient data is processed in Australia Published statement: "All patient data is processed and stored within Australia, aligned with Australian Privacy Principles and local healthcare expectations." (source: https://www.lyrebirdhealth.com/au/compliance, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does Lyrebird Health use?

Accepted Answer

External AI model providers not named on the compliance page; states notes and transcripts are never used to train external AI models Published statement: "Notes and transcripts are never sold, shared, or used to train external AI models." (source: https://www.lyrebirdhealth.com/au/compliance, checked 2026-09-25). Azure OpenAI (Microsoft) stated for language processing; Deepgram and Whisper stated for speech-to-text conversion. Published statement: "Azure OpenAI (Microsoft) for language processing Deepgram and Whisper for speech-to-text conversion" (source: https://www.lyrebirdhealth.com/au/legal/privacy-policy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does Lyrebird Health publish?

Accepted Answer

ISO 27001 certification announced by the vendor on 6 July 2026. Vendor states alignment with APP, HIPAA and GDPR. No SOC 2 or IRAP statement found on vendor-published pages. Published statement: "Lyrebird Health is ISO 27001 Certified Clinical AI Platform" (source: https://www.lyrebirdhealth.com/au/blogs/lyrebird-health-is-iso-27001-certified-clinical-ai-platform, checked 2026-09-25). Alignment with APP, HIPAA and GDPR stated on compliance page; encryption in transit and at rest Published statement: "Aligned with APP, HIPAA, and GDPR." (source: https://www.lyrebirdhealth.com/au/compliance, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does Lyrebird Health name?

Accepted Answer

Named in privacy policy: Azure OpenAI (Microsoft), Deepgram, Whisper, AWS, Supabase, Sentry, Honeycomb, Stripe, Segment. Published statement: "Azure OpenAI (Microsoft) for language processing Deepgram and Whisper for speech-to-text conversion AWS for secure cloud hosting and data storage Supabase for authentication and database services" (source: https://www.lyrebirdhealth.com/au/legal/privacy-policy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does Lyrebird Health publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does Lyrebird Health list as integrations?

Accepted Answer

Named on vendor integrations page: Bp Premier (Best Practice), BetterConsult, Cubiko, Epic, Oracle Health (Cerner), Meditech; standards stated as FHIR, HL7 v2 and SMART on FHIR. Published statement: "Epic, Oracle Health (Cerner), and Meditech plus flexible standards (FHIR, HL7, SMART on FHIR) to support both modern and legacy environments." (source: https://www.lyrebirdhealth.com/au/integrations, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does Lyrebird Health contract through?

Accepted Answer

Subsidio Pty Ltd, ABN 57 668 121 248 (named as the policy owner entity in the Lyrebird Health privacy policy). Published statement: "Subsidio Pty Ltd (ABN 57 668 121 248) (we, us or our) is committed to protecting your privacy." (source: https://www.lyrebirdhealth.com/au/legal/privacy-policy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does Lyrebird Health publish?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Lyrebird Health

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What Lyrebird Health publishes — answered from the record

Something wrong or out of date?