NoteLane is hosted on dedicated Amazon Web Services (us-east-2 Ohio/Midwest) infrastructure covered by an active AWS HIPAA Business Associate Addendum (BAA). All workspace data is stored on AES-256 encrypted storage volumes with TLS 1.3 encryption in transit and restricted owner-only file permissions.
Each subscribing clinician, service facilitator, mentor, rehab worker, or clinic operates inside a cryptographically isolated tenant workspace. No other subscriber or external party can read, list, query, or export your client roster, templates, or progress notes.
Client session briefs, progress notes, and Recovery Plan PDFs are processed strictly to generate and validate your clinical documentation and are never used to train external or third-party AI models. When you drop in a county Recovery Plan PDF, NoteLane extracts verbatim ISP goals in memory and immediately discards the PDF bytes without writing the PDF to disk.
To uphold HIPAA minimum-necessary retention principles, NoteLane retains at most the 2 most recent approved notes per client for voice synthesis and automatically purges full historical note narratives and exported .docx files older than 30 days once exported. Continuity across sessions is preserved via a compact, non-narrative Rolling Client Continuity Card (verbatim ISP goals, brief session threads, and next-step dates). You may also trigger immediate cryptographic shredding of any note and its exported artifacts at any time.
NoteLane is an assistive clinical documentation and DHS 36 pre-flight verification tool. The subscribing clinician or provider is the sole author of record and is responsible for reviewing, editing as needed, and attesting to the accuracy of every progress note prior to approval, export, or county/agency billing submission.
By accepting this agreement and activating a NoteLane workspace, you attest that you are authorized by your practice, clinic, or contracted county/agency to use NoteLane under these HIPAA Business Associate terms, and that you will never transmit client Protected Health Information (PHI) via unencrypted email.
[SAMPLE] Jordan M. (Practice Client — Safe to Test). Approving or exporting notes on the [SAMPLE] client never consumes a starter credit..docx Mapper, 3-Mode Language Switcher, In-Memory Recovery Plan PDF Intake, and Monthly Batch Packager. Subscriptions may be managed or canceled anytime via the Stripe Billing Portal.Email support at support@mynotelane.com · Weekly office hours Fridays 1:00–3:00 PM CT (never include client PHI in email).