Each question carries the artefact to require from a vendor, and aurii's answer to it.
The Azure region names for primary storage and for backups.
Hosting and backups are in Australian regions. Where the data sits. Australia East, in Sydney, is primary, and Australia Southeast, in Melbourne, holds the geo-redundant backups.
The subprocessor list in writing, naming what each one processes.
Microsoft Azure hosts the platform in Australian regions, an enterprise AI provider under contract drafts the documentation, Medical Objects carries signed correspondence, Microsoft 365 carries account and notification mail, and Stripe processes card payments. Two analytics services measure this website only. The sub-processor list.
The clause in the AI provider's contract that covers training.
No. Your content is not used to train models, and the commitment is contractual.
The retention schedule and the deletion process, as two documents.
Seven years is a record-keeping obligation on the practice. Deletion runs on request. What is deleted and what the practice keeps.
Which fields carry application-layer encryption and which rely on the platform.
Clinical data is encrypted in transit and at rest. How the keys are held. Application-layer key wrapping covers Medicare numbers, IHI, multi-factor secrets and prescriber-auth credentials, each value sealed with its own data key, wrapped by a key held in Azure Key Vault in Australia. Notes, letters, transcripts and audio rely on platform encryption at rest in the same regions.
Which multi-factor methods are enforced, and on which roles.
Multi-factor authentication is required on every account. aurii supports passkeys over WebAuthn and time-based one-time codes, with backup codes for recovery, and the one-time-code secret is encrypted under a key held in Azure Key Vault. Security controls.
A chain verification run on your own tenant.
Every action a practice user takes is written to a hash-chained audit log. How the chain works. The table is append-only, the application's database role holds no UPDATE or DELETE on it, and an admin can re-run the chain verification from the audit screen.
Which legal entity holds each certificate, and its certificate number.
SMB1001:2026 Gold (Level 3) is held by Black Shard Pty Ltd, which builds, hosts and secures the platform, and is certified by CyberCert. The certificate number is supplied on request to hello@aurii.com.au. ISO/IEC 27001, SOC 2 and the IRAP assessment to PROTECTED belong to Microsoft Azure. Certifications and who holds them are listed on the trust page.
Where clinical responsibility sits in the contract.
The treating clinician remains responsible for the clinical content. Clinical safety.
What the system blocks while a draft is unsigned.
Nothing leaves aurii until a clinician signs it. Clinical safety. Dispatch is refused on any letter not in a signed state, and every edit made before the signature is written to the audit log.
Which Australian guidance the vendor works to, and who reviews releases.
aurii claims no endorsement from an Australian college or professional body. aurii's clinical board reviews every specialty template, the clinical safeguards and every material change to the documentation system before it reaches a ward. The clinical board.
The published price list and the terms under it.
A$199 + GST per clinician per month. Full pricing. One plan, no feature tiers. Hospitals and groups are quoted separately.
When the trial ends and when the first invoice is raised.
Free 30-day trial. Create an account in the iPhone app or at app.aurii.com.au/signup. A card is added at signup on Stripe's checkout page; nothing is charged until the 30 days end. How the trial starts.
The export format, the notice period, and what is kept after exit.
No lock-in contract, month to month or annually. An account owner exports the practice's records as a JSON bundle and the audit trail as CSV, and each export request is written to the audit log. What happens to the records on exit.
Who answers a support request, and in which hours.
Email to hello@aurii.com.au and scheduled calls, on Australian business hours. Contact.
What happens to a recording started with no network connection.
Recording continues, and the consult is queued on the device and uploaded when the connection returns. The product.
Which stores the app is published on, and in which countries.
On the Australian App Store for iPhone and iPad, and at app.aurii.com.au in a browser. Get the app.
When the last three releases shipped.
Releases are published on the Australian App Store, and the listing carries the date of each one. Get the app.
Which delivery networks are live today, and which are on a roadmap.
Medical Objects is the only secure-messaging network aurii delivers on, and there is no fax lane. Results are uploaded, with no live inbound results feed and no two-way EMR synchronisation. Billing items are captured at the bedside against the episode, for your practice to claim. Billing.
Free 30-day trial. A card is added at signup on Stripe's checkout page; nothing is charged until the 30 days end. Then A$199 + GST per clinician per month.