# Evaluating Medrecords AI: FAQ for physician reviewers > FAQ for physician reviewers and hospital risk managers evaluating Medrecords AI: what it does, SOC 2 and HIPAA, page citations, who signs, price per page. Canonical page: https://medrecords.ai/evaluating-medrecords-ai/ --- **Med mal:** a 2,000-page chart drafted and cited in about 20 minutes. [Book a demo →](https://medrecords.ai/demo/) [Home](https://medrecords.ai/) › Evaluating Medrecords AI: answers for physician reviewers and risk managers ## Evaluating Medrecords AI: answers for physician reviewers and risk managers What it does, how it protects PHI, who signs and what it costs Evaluating Medrecords AI comes down to 5 questions: what it does, how it protects PHI, how you check its work, who signs, and what it costs. In short, it drafts cited chronologies at about 100 pages a minute, it is SOC 2 and HIPAA compliant, you sign, and pages cost 10¢ each. By [Ahmed Jemaa](https://medrecords.ai/authors/ahmed-jemaa/), Co-Founder & CEO of Medrecords AI · Published 3 Nov 2026 · Updated 3 Nov 2026 ### What should a physician reviewer check before using Medrecords AI? Check 5 things: what it produces, whether PHI is covered by a BAA, whether every line cites a page, who signs, and the price per page. Each answer below comes from our security, HIPAA, pricing and reviews pages, linked under the answer, so you can forward this page to procurement. ### What it does #### What does Medrecords AI do? It reads a medical record file at about 100 pages a minute and drafts a medical chronology, summary reports and, for IME physicians, an IME report with dictation-to-report. Every line is cited to its source page. You review, you revise, you sign. Source: [Pricing](https://medrecords.ai/pricing/), [Security](https://medrecords.ai/security/) #### Does it decide standard of care or causation? No. AI does the reading and helps you make the call. The last word is yours. Every output is cited, reviewable and traceable to its source, so you can check anything before you sign. Source: [Security](https://medrecords.ai/security/) ### Security and HIPAA #### Is Medrecords AI SOC 2 and HIPAA compliant? Yes. Medrecords AI is SOC 2 and HIPAA compliant. Our SOC 2 and HIPAA readiness reports, both dated 3 Nov 2026, are free to download with no form. They are readiness reports from continuous control monitoring in Sprinto, not an auditor's attestation. Source: [Compliance reports](https://medrecords.ai/security/#reports) #### Do you sign a BAA? Yes. The BAA is presented click-through at signup and before the free first case, so it is in place before any upload. No BAA, no upload. For a countersigned copy, email legal@medrecords.ai. Source: [HIPAA and BAA](https://medrecords.ai/hipaa/) #### Do IME physicians need a BAA? Often, yes. IME and QME physicians and evaluation practices that also treat patients or bill health plans are covered entities, and HIPAA requires a BAA before we touch their PHI. Ours is built into signup. Source: [HIPAA and BAA](https://medrecords.ai/hipaa/) #### Are my records used to train AI models? No. Your files are processed to produce your outputs and nothing else. This is contractual: it is in the BAA. Every subcontractor that can touch PHI, including every AI vendor, signs a BAA with zero-retention inference and no training. Source: [Security](https://medrecords.ai/security/), [HIPAA and BAA](https://medrecords.ai/hipaa/) #### Where is my data processed and stored? In the US only. Files are stored on AWS in US data centers. 4 vendors can touch PHI, all under BAA. AI model requests go through OpenRouter, mostly to open-source models, with Anthropic and OpenAI as a backup. Source: [Security](https://medrecords.ai/security/), [Subprocessor list](https://medrecords.ai/subprocessors/) #### How is PHI protected? TLS 1.2 or better in transit and AES-256 at rest, for every file. People see only the cases assigned to them, and every PHI access event is logged with who, what and when. Source: [Security](https://medrecords.ai/security/) #### How fast are breaches reported? Without unreasonable delay, and no later than 72 hours after we confirm a breach of unsecured PHI, as set out in the DPA and the BAA. Source: [Security](https://medrecords.ai/security/) #### What happens to my records if we stop? PHI is returned within a 30-day export window, then destroyed, including backups, with a deletion certificate. Source: [Security](https://medrecords.ai/security/) ### Checking the work and signing #### How do I check its work? **Page-linked facts:** every line in the chronology cites its source page, and you open that page in 1 click. Check the rows your opinion rests on against the page before you sign. Source: [Security](https://medrecords.ai/security/) #### Who reviews and signs the final work? You do. The software drafts and cites; you review, you revise, you sign. The last word is yours. Source: [Pricing](https://medrecords.ai/pricing/) ### Price #### What does it cost per page? 10¢ per deduplicated page, down to 5¢ a page at volume. Duplicates are never billed. There is no setup fee, no seats and no minimum, and credits never expire. Prices are as of 25 Oct 2026. Source: [Pricing](https://medrecords.ai/pricing/) #### What would a typical file cost? 1,847 pages bill $184.70 and 40 pages bill $4 at the 10¢ rate. That is the whole invoice. Source: [Pricing](https://medrecords.ai/pricing/) #### Can I try it on a real case? Yes. First case is free on us, with no card. Access opens within 1 business day after your demo. Source: [Pricing](https://medrecords.ai/pricing/) ### What users say #### Where can I read what users say? On our reviews page. Each quote comes from a recorded call, an email or a G2 review, printed with first name and role only. Source: [Reviews](https://medrecords.ai/reviews/) Bring 1 real chart Send your longest chart to a demo and check every cited line yourself. First case is free on us. [Book a demo →](https://medrecords.ai/demo/) [See pricing](https://medrecords.ai/pricing/) ### Related reading [Security at Medrecords AI →](https://medrecords.ai/security/) [HIPAA and the BAA →](https://medrecords.ai/hipaa/) [Pricing →](https://medrecords.ai/pricing/) [Reviews →](https://medrecords.ai/reviews/)