Vendor Due Diligence Questions

Before adopting an AI transcription platform, agencies should consider asking vendors:

• • Where are recordings, transcripts, and summaries stored?
  • How long is data retained, and can retention periods be customized?
  • Is customer data used to train AI models or improve the vendor’s products?
  • Are recordings, transcripts, or voiceprints shared with third parties?
  • What security controls, encryption standards, and access controls are in place?
  • Can data be permanently deleted upon request?
  • Does the platform create or store voiceprints or other biometric information?
  • What consent and notification features are built into the product?
  • Can recordings or transcripts be restricted to specific users or groups?
  • How are data breaches, security incidents, or unauthorized access handled?
  • What contractual commitments does the vendor make regarding confidentiality and data ownership?

View Fillable AI Transcription Platforms Vendor Due Diligence Checklist Here