Per-job control instead of one contract for everything
A practice does not have one documentation need. A clinical dictation entering a chart and a staff meeting recording have completely different requirements, and a single contracted service level either overpays for the second or underprotects the first.
A platform that makes verification a per-job choice, with the rate difference visible at the point of choosing, lets the same account do both honestly. The important part is that the decision is recorded: the finished document should state which mode produced it, so nobody has to remember six months later whether that particular note was reviewed.
The form is usually the deliverable, not the transcript
A large share of clinical administration is completing a document whose structure is already fixed - an intake sheet, a referral, a prior authorisation, a state or payer form. For that work a transcript is an intermediate artifact, and somebody then types its contents into the actual form by hand. That step is where the time saving goes.
A platform that writes dictated answers into the original document, in its own layout, removes it. The test to apply when evaluating one: upload a real form you have to submit, dictate the answers, and see whether what comes back is the form or a summary of the form. A summary is not the thing the payer or the agency accepts.
The audit trail is the part you cannot retrofit
CMS audit posture treats a note signed seconds after an encounter closed as evidence that no meaningful review occurred, with consequences up to full revenue forfeiture. And the only affirmative defence against a negligent-documentation claim involving AI-generated content is a contemporaneous, system-generated, tamper-evident log proving the clinician reviewed the specific contested content before signing.
That log cannot be reconstructed afterwards - that is what makes it evidence. Either the system recorded, at the time, who approved what content and when, or it did not. A platform that stores a digest of exactly the content the signer saw, the version, the time, and the interval since the transcript became available has produced the artifact. One that stores "approved by Dr Chen" has produced a claim.
- Who approved the document, and when
- A digest of exactly the content they saw, so later changes are detectable
- Which mode produced it - human-verified or unreviewed AI
- The elapsed time between the transcript arriving and the signature
- An export a recipient can verify without trusting the vendor
Integration, and what to ask about it
A document delivered as an email attachment has to be filed by a person. A document delivered by webhook or API, or as a FHIR DocumentReference carrying its own metadata, does not. The difference is a few minutes per document multiplied by your volume, and it is the least glamorous and most reliable saving on this list.
Ask specifically what the platform emits and whether it has been validated against the standard it claims. A vendor naming an EHR by name should be asked whether they have tested against that vendor's sandbox - the marketing pages in this industry routinely contradict their own help centres on which integrations are real.
What ScribeForms provides against those four
Verification is per job at a stated rate, with the mode recorded on the finished document. Blank forms are filled in their own layout rather than summarised. Every approval is logged over a SHA-256 digest with the transcript-to-signature interval, exportable and independently verifiable. Delivery is by download, email, HMAC-signed webhook, a read-only API, or FHIR R4 DocumentReference validated before it is sent.
What we do not have: SOC 2 certification, which is in progress and will be published when the report exists; ambient in-visit capture; and any tested EHR integration we could name. We would rather list those than imply them.
What to put in a trial before committing
Three tests separate platforms from services quickly. Upload a real form you have to submit and check whether what comes back is that form filled or a summary of it - a summary is not what a payer or an agency accepts. Approve a document, export the attestation record, and recompute the digest yourself against the content: if the vendor cannot tell you how the digest was computed, the record is a claim rather than evidence. And send your worst audio, because performance on a clean dictation predicts nothing about performance on a consultation with crosstalk.
If all three pass, the per-minute rate is the least important remaining variable. If any fails, a lower rate is buying you a cheaper version of the wrong thing.
Sources
- 42 C.F.R. § 482.24(c)(1) (authentication by the responsible clinician)
- 42 U.S.C. § 1395l(e) (documentation supporting the billed service)
- 45 C.F.R. § 164.312(b) (audit controls)
Verified 19 September 2026.
The regulatory information on this page is general background compiled from public primary sources, not legal or compliance advice. Requirements change and vary by jurisdiction and by court. Verify current rules with the relevant authority or your own counsel before relying on them.