Skip to content

PRIVACY & CONTROL

Know what is captured.
Choose what is shared.

Clear recording controls, review before export and an explicit conversation about where your data is processed.

Consent first

The mic stays off until you start listening and confirm everyone who can be heard knows. A listening state and timer stay visible.

Audio does not reach XIO

In the current console, supported on-device speech is used where available. Otherwise the browser’s speech service handles transcription. This is not a promise that all speech stays on your device.

A person reviews

Every item is reviewed, every action has an owner, and every flag is fixed or explained. A reviewer is named before exports unlock.

Optional AI, text only

The optional Claude pass redrafts items from transcript text, never audio. It is off by default. Its output still needs review.

Approval controls exports and copying from the console. Speech transcription and optional AI processing use the routes described above; the approval gate does not make those services local.

SEE THE APPROVAL CHECK

Resolve the gap.
Then approve the record.

Assign an owner, check the source, and approve the example. Change the owner afterwards to see why review reopens.

This demonstration sends nothing. Record approval is not proof that the physical work has been completed.

Try the approval checkInteractive example · Nothing is sent
  1. Draft
  2. Needs review
  3. Record approved
ActionNeeds review

Tape it off

Owner
Needs an owner
Due
ASAP
00:03 · SOURCE WORDS

“Marco, tape it off right away.”

Missing owner. Resolve this flag first.

Reviewer: Jamie (fictional example)

Sharing is locked until the owner and source are reviewed.

A visual example of the checks. The live console still requires every item and flag to be reviewed.

BEFORE A REAL SESSION

Your requirements.
Agreed in writing.

  • Who may use and review the records.
  • Where processing and hosting take place.
  • How long records are kept and how they are deleted.
  • Which participant notices or consents are needed.

The current boundary

Draft sessions are saved in this browser. They are not a shared, authenticated team workspace. The reviewer name is entered on the device, not an identity-verified signature.

Clinic use is administrative only. XIO does not claim a regulatory certification for this console.

Discuss a private implementation Read the privacy policy