Question 1

Where does Nabla store patient data?

Accepted Answer

Hosted on Google Cloud Platform; database location selected at organization creation time. Published statement: "All our data is hosted on Google Cloud Platform databases and storage buckets. These databases are located in the region you choose when you create your organization." (source: https://www.nabla.com/security, checked 2026-09-25). US clients: US regions on Google Cloud (GCP); all other clients: EU Google (GCP) data centres Published statement: "U.S. based clients have data stored in U.S. regions within Google (GCP); all other clients are stored in EU Google (GCP) data centers." (source: https://trust.nabla.com/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does Nabla process data?

Accepted Answer

GCP infrastructure hosting: Central Region (USA) and Belgium (all non-USA); Azure speech-to-text operations in U.S. regions Published statement: "Google Cloud Infrastructure Hosting Central Region (USA) Belgium (All Non-USA) Azure Speech to Text Operations (U.S. Regions)" (source: https://trust.nabla.com/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does Nabla use?

Accepted Answer

Publishes an AI Model Card (CHAI version 2); external model providers not named on trust centre Published statement: "AI Model Card CHAI version 2" (source: https://trust.nabla.com/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does Nabla publish?

Accepted Answer

Vendor states it follows HIPAA, GDPR, SOC 2, ISO 27001 and NIST cybersecurity standards for security and privacy Published statement: "Nabla follows HIPAA, GDPR, SOC2, ISO27001 and NIST Cybersecurity standards for security and privacy." (source: https://trust.nabla.com/, checked 2026-09-25). HIPAA and GDPR compliance and ISO 27001 / SOC 2 Type II certification stated on the EHR integration page. Published statement: "HIPAA and GDPR Compliant. Certified for ISO 27001 and SOC 2 Type II." (source: https://nabla.com/ehr, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does Nabla name?

Accepted Answer

Core vendors listed on trust centre: Google Cloud (infrastructure hosting), Azure (speech to text), Front (support ticketing, no PHI) Published statement: "Google Cloud Infrastructure Hosting Central Region (USA) Belgium (All Non-USA) Azure Speech to Text Operations (U.S. Regions) Front Support Ticketing (No PHI)" (source: https://trust.nabla.com/, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does Nabla publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does Nabla list as integrations?

Accepted Answer

Site navigation names dedicated integrations for Epic and athenahealth, plus a 'Nabla Connect' module and an 'All EHRs' page. Published statement: "Integration Nabla Connect All EHRs Epic athenahealth" (source: https://nabla.com/ehr, checked 2026-09-25). Epic — Nabla states it was added to Epic Toolbox for Ambient Voice Recognition and can be embedded inside Epic's Haiku mobile app (company press release, 7 Oct 2025). Published statement: "today announced its addition to Epic Toolbox for Ambient Voice Recognition, marking a significant evolution in how the company delivers ambient AI capabilities directly within Epic workflows." (source: https://nabla.com/press-release/nabla-joins-epic-toolbox-deepening-its-integration-with-epic, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does Nabla contract through?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does Nabla publish?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Nabla

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What Nabla publishes — answered from the record

Something wrong or out of date?