Privacy Tier

Session audio is the most sensitive piece of data a clinical system processes. The two 2026 AEPD (Spain's data protection authority) notes on AI transcription say it plainly: voice is personal data in the strict sense whenever it can identify the client, and the minimisation principle requires keeping it only for the time strictly necessary for the purpose of treatment. But "the time strictly necessary" varies by clinical case — and that is why nexmin does not impose a single policy. Ephemeral Audio is the default and meets GDPR out of the box: audio comes in, is transcribed and the original is destroyed irreversibly after the analysis is validated and archived. The structured note remains —not the audio—; a later re-analysis with a new prompt or a different model works on that transcript, not on the voice. Full Retention keeps the audio encrypted in the vault when you have given the client an explicit commitment to be able to return their "full session" on demand, and it enables playback and voice analysis — useful in some deeper therapeutic contexts where the client wants that record preserved. No Active Recording is the strictest option: the session is not recorded; you work from a brief memo or summary you record after the session, and no session audio remains. The decision is yours, not the system's. When you create the client's record you choose the tier; you can change it later, and the change applies to material captured from that moment onward (not retroactively, so as not to destroy what the client authorised when they signed the original consent).

Related terms

• Identity Vault
• Data sovereignty