AI Clinical Documentation: How to Choose and Use an AI Scribe Safely
AI clinical documentation uses an AI tool to draft the written record of a patient visit, and used well it can cut charting time without cutting corners. Before you let any AI scribe near a patient encounter, here is how to evaluate one as a physician. A HIPAA and safety checklist, the red flags that should end a vendor conversation, the 12 questions to ask before you sign, and the de-identify, draft, verify workflow that keeps you the author of record.
The short version: AI clinical documentation is the use of an AI tool to produce the written record of a clinical encounter. An ambient AI scribe listens to the visit and generates a draft note, or a general assistant drafts the note from de-identified details you provide. The clinician stays the author of record: the AI drafts and organizes the language, and you review, correct, and sign. Chosen and used carefully, it can meaningfully cut charting time without creating HIPAA or accuracy risk.
Write clinical notes with AI while protecting patient data
AI Charting for Doctors gives physicians a structured process for implementing the de-identify-draft-verify workflow in your practice.
Key Takeaways
- AI clinical documentation means using a tool to help draft and organize the written record of a visit. A general assistant like Claude can shape a rough set of notes into a clean draft, but the physician reads, corrects, and signs.
- Real systems are getting time back. The Permanente Medical Group reported more than 15,000 documentation hours saved across about 2.5 million encounters in a year.
- A randomized trial at UCLA Health is the honest counterweight. One scribe tool cut time in the note by roughly 10 percent, the other showed no clear time gain. The result you get depends on the discipline around the tool, not the tool by itself.
- The hard rule for a general AI tool is simple. No patient identifiers ever go in. You de-identify first, draft with the visit content stripped of names and numbers, then type the finished note back into the EMR yourself.
- No general chatbot is a certified HIPAA-compliant medical record. The clinician stays responsible for every clinical fact, and your organization's policy and any signed agreement come first.
Source: The Leveraged Years Briefing. Permalink
Charting is the part of the day that follows you home. The visit ends, the patient leaves, and the note is still open. For a lot of physicians the question about AI is not whether it sounds impressive. It is whether it can give back an hour of the evening without creating a privacy problem or a wrong note you have to defend later.
This briefing is about that practical middle. Not the version where AI replaces the clinician, and not the version where it is a gimmick. The honest version is that a general AI assistant can take the rough material of a visit and turn it into a clean first draft of a note, fast. The catch is that the safety lives entirely in how you feed it and how you check it. Get the workflow right and you save real time. Get it wrong and you have handed protected health information to a tool that was never meant to hold it.
What is AI clinical documentation?
AI clinical documentation is the use of an AI tool to help produce the written record of a clinical encounter. In its purest form, a purpose-built ambient scribe listens to the visit and generates a draft note. A more flexible version, and the one most individual physicians can actually try today, is using a general assistant like Claude to do the writing work after the fact. You give it the substance of the encounter, in a de-identified form, and it returns a structured draft: a clean history of present illness, an organized assessment, a readable plan.
The thing to hold onto is what the tool is doing and what it is not. It is drafting and organizing language. It is not practicing medicine. It does not decide the diagnosis, it does not pick the plan, and it does not get to be the final author of the record. You do. The model is a fast writer with no clinical accountability, which is exactly why a physician reads every line before it becomes part of the chart.
An AI scribe vendor evaluation checklist
If you are weighing an ambient scribe or any tool that drafts your notes, work through these five areas before you adopt anything. Treat a weak answer in any one of them as a reason to slow down.
Privacy, security, and HIPAA
- Will the vendor sign a Business Associate Agreement? A refusal ends the conversation.
- Where is your data stored, in which country, and for how long?
- Is audio and text encrypted in transit and at rest?
- Is your patient data used to train their models, and can you opt out in writing?
Clinical workflow and usability
- Does it support your specialty and your note style, including SOAP?
- How does a finished note reach your EHR, and how many steps does that take?
- How much editing does a typical note still need before you would sign it?
Clinical safety and liability
- Who is the legal author of record on every note?
- How does the tool handle details it cannot verify, and how would you catch them?
- Can you see what the AI wrote versus what you changed?
- What does your malpractice carrier say about AI-assisted documentation?
Evidence and performance
- Is there any peer-reviewed or prospective study behind the time-savings claim?
- What is the real number of minutes saved per note, measured rather than promised?
- Will they connect you with a practice like yours that already uses it?
Cost, contracts, and exit
- How is it priced, per user or per note, and what happens as you scale?
- How long is the contract, and what are the renewal terms?
- If you leave, can you export your notes and data cleanly?
Red flags: when to walk away from an AI scribe vendor
Some answers should end the trial on the spot. Watch for these.
- Vague answers about how patient data is handled, or any hesitation to sign a BAA.
- Patient data used to improve their general models with no clear way to opt out.
- No audit trail that separates AI text from your own edits.
- Marketing that promises fully automatic charting and downplays your role as the verifier.
- Pressure to skip your institution's security or compliance review.
The 12 questions to ask before you adopt an AI scribe
Print this and bring it to the demo. If a vendor cannot answer these in plain language, that is your answer.
- Is the tool HIPAA compliant by design, or only by policy?
- Will you sign a Business Associate Agreement?
- Where is my data stored, in which country, and for how long?
- Is my patient data ever used to train your models?
- Who legally owns the notes the tool generates?
- How do you encrypt data in transit and at rest?
- How will I see what the AI wrote versus what I edited?
- How does the tool handle details it cannot verify?
- What is your data breach notification policy, in plain English?
- What is the measured time saved per note in a practice like mine?
- How does a finished note reach my EHR?
- If I cancel, how do I export my data?
If you lead a team that has to make calls like this, evaluating tools with judgment rather than hype is a skill in itself. That is the whole point of our AI training for senior professionals.
What people mean by clinical documentation AI tools
The phrase "clinical documentation AI tools" covers four different things, and they are not interchangeable. Knowing which one you are using tells you where the risk sits.
Ambient AI scribes. Purpose-built tools that listen to the visit through a microphone and generate a draft note. They are built for healthcare, usually run under a business associate agreement, and are the category behind the Kaiser and UCLA studies below. The draft still goes to the physician to edit and sign. Because these tools generate language you did not say word for word, they are also the category that most needs a quick accuracy review before you sign.
General AI assistants. A tool like Claude is not a medical product, but it is an excellent writer. Most individual physicians can try it today by feeding it the substance of a visit in de-identified form and getting back a clean, structured draft. The safety lives entirely in how you feed it, which is the whole point of the workflow below.
Computer-assisted physician documentation (CAPD). Software that reads the note as you write it inside the EMR and prompts you for missing specificity, a clarified diagnosis, or a detail a coder will need. CAPD is a nudge engine, not a ghostwriter. It improves the note you are already authoring.
Clinical documentation integrity (CDI) programs. The people-and-process layer, often CDI specialists plus software, that makes sure the record accurately reflects the patient's condition and supports the right level of care. AI increasingly sits underneath CDI, but a human reviewer still owns the judgment.
The pattern across all four is the same. The tool drafts, prompts, or organizes. A clinician confirms and signs. Nothing on this list is allowed to be the final author of the record.
Does AI actually save charting time?
Yes, with a real and useful asterisk. The best large-scale evidence and the best skeptical evidence point the same direction: the time savings are real, and they are earned, not automatic.
The case that it works at scale
The most cited example is The Permanente Medical Group, the physician arm tied to Kaiser Permanente in Northern California. In a study published in NEJM Catalyst, more than 7,000 physicians used an ambient AI scribe across roughly 2.5 million patient encounters over about a year. The reported result was an estimated 15,700 hours of documentation time saved for the physicians who used it, a figure the American Medical Association rounded to about 15,000 hours in its own write-up. Just as important for anyone weighing the human side, a large share of surveyed physicians said the tool improved their ability to connect with patients during the visit and raised their job satisfaction. The system was clear about the mechanism. The AI drafts the note. The physician edits it before it enters the record.
What the Kaiser result actually shows
A draft you correct is faster than a blank page you fill. At scale, that gap added up to thousands of hours and a calmer visit. The tool did the typing. The physician kept the pen.
The case for staying realistic
Now the counterweight, because it is the more useful number for setting expectations. UCLA Health ran a randomized clinical trial of two commercial ambient scribes across 238 physicians, 14 specialties, and around 72,000 encounters. One tool reduced the time physicians spent in the note by roughly 10 percent. The other showed no clear time benefit over usual care. Both tools were associated with modest improvements in burnout and workload, which matters, but the headline is the split. Two tools, same study, very different time results.
The lesson is not that AI fails to save time. It is that the savings depend on the tool, the specialty, and the discipline of the person using it. A scribe that produces a sloppy draft you have to rewrite saves nothing. A clean draft you trust enough to lightly edit saves a lot. The difference is the workflow and the review habit, which is the part you control.
Is it safe to use AI for clinical notes?
It can be, and it can also be the fastest way to create a compliance incident. Safety here is not vague. It comes down to two questions. What did you put into the tool, and did you check what came out.
The most important fact for an individual physician using a general assistant is this: no mainstream consumer AI chatbot is, by itself, a certified HIPAA-compliant medical record system. Some vendors offer business agreements and enterprise configurations that change the picture, and large health systems run scribes under formal contracts and review programs. That is a different situation from a doctor opening a public chatbot on a personal account. Until your organization has confirmed otherwise in writing, you should assume a general tool is not a safe place for protected health information.
What should never go into an AI tool?
Keep a short list in your head, and treat it as absolute when you are using a general assistant on your own. The following should never be pasted into a general AI tool: the patient's name, date of birth, medical record number, address, phone number, or any direct identifier. Also out: full dates tied to the patient, photographs, and anything that would let a reader work out who the person is. If a colleague could identify the patient from what you typed, it does not belong in the tool.
The good news is that almost all of the writing value survives de-identification. The model does not need a name to organize a history of present illness. It does not need a medical record number to structure an assessment and plan. You can describe a 60-year-old patient with a two-week cough and the relevant findings, get an excellent draft, and never expose a single identifier.
Stop before you paste
De-identify first, every time. Strip names, dates of birth, record numbers, and contact details before any visit content goes near a general AI tool. A de-identified input is a safe input. This one habit prevents the privacy problems most physicians are right to worry about.
What HIPAA actually counts as an identifier
"De-identify first" is easy to say and easy to do badly. The federal standard is specific. Under the HIPAA Privacy Rule's Safe Harbor method, the Department of Health and Human Services lists eighteen categories of identifiers that have to come out before information is considered de-identified. It is worth knowing the list, because the ones people forget are the ones that cause problems.
The eighteen include the obvious: names, geographic detail smaller than a state, phone and fax numbers, email addresses, Social Security numbers, medical record numbers, health plan and account numbers, and full-face photographs. It also includes the ones that slip through: every date tied to the individual except the year, which means dates of birth, admission, discharge, and death, and any age over 89. The last category is a catch-all for any other unique identifying number or code. The full list lives on the HHS de-identification guidance page, and it is the cleanest checklist a physician can keep next to the keyboard.
The practical version is shorter. If a detail could point a stranger at one specific patient, it does not belong in a general AI tool. Describe the clinical picture, not the person. A sixty-year-old with a two-week cough is a safe input. A name, a birth date, or a record number is not.
What does a safe workflow look like?
The safe pattern is small and repeatable. Think of it as four steps that keep the identifiers out and keep you as the author of record.
The two-window habit
In practice this works as a two-window routine. One window is the AI tool, where everything is de-identified. The other is the EMR, where the real patient record lives. The two never touch directly. You draft in the de-identified window, read the draft critically, and then write the finished, accurate note into the EMR by hand. Nothing is copied from your chart into the chatbot, and nothing is pasted from the chatbot into the chart without you reading and owning every word. That gap between the two windows is where the patient's privacy stays protected.
Verify every clinical fact
AI writes fluently even when it is wrong. It can smooth over a detail, invent a finding you never mentioned, or state a dose with false confidence. So the verification step is not optional polish, it is the clinical safeguard. Read the draft as the clinician of record. Confirm the medications, the doses, the allergies, the assessment, and the plan against what actually happened in the room. If a line is not true, it does not go in. You are accountable for the note, so you read it like you wrote it, because you are about to.
The rule that keeps it safe and useful
The AI drafts and organizes. You de-identify the input, verify every clinical fact, and remain the author of record. Confirm your organization's policy and any signed agreement before a tool touches anything close to real patient data.
What AI does not replace (the accountability line)
There is a clear line. AI should not be the source of a clinical fact. It does not decide the diagnosis, it does not choose the medication or the dose, and it does not get to assert something happened in the visit that you did not confirm. It is a drafting aid for language and structure, working from material you supplied. The clinical content is yours, the judgment is yours, and the signature is yours. A tool that drafts is an asset. A tool that you let invent clinical facts is a liability, and the difference is entirely in how you use it.
This is not only good practice, it is where the profession has drawn the line. The American Medical Association deliberately uses the term augmented intelligence rather than artificial intelligence, to make the point that these tools are built to assist the physician's judgment, not stand in for it. The AMA's principles for AI in medicine put accountability on the people deploying and using the system, not on the software. In 2025 The Joint Commission, alongside the Coalition for Health AI, issued its first guidance on responsible AI use and pointed in the same direction: clinicians should be trained on each tool's intended use, its limits, and their own duty to monitor it. The tool has no license, no liability, and no duty to the patient. You do.
That maps cleanly onto the record itself. Whatever drafted the note, the clinician who signs it is the author of record and is responsible for its accuracy. This is not a new idea invented for AI. CMS has long told organizations to name specific individuals accountable for the accuracy and integrity of EHR documentation, and federal auditors have flagged record cloning and copy-and-paste as the EHR habits most often abused. A note an AI drafted and you pasted without reading is the same risk wearing a newer label. A signature on a note you did not read is a signature on a note you cannot defend. So the verification step is not workflow hygiene, it is the moment you take ownership of every clinical fact in the draft: the medications, the doses, the allergies, the assessment, and the plan. If a line is not true, it does not get signed.
The safety protocol, in one place:
- De-identify the input. Strip all eighteen HIPAA identifier types before any visit content goes near a general tool.
- Keep two windows apart. The AI tool and the EMR never exchange text directly. You retype the finished note.
- Verify every clinical fact against what happened in the room, not against how good the draft sounds.
- Sign only what you confirmed. The signature makes you the author of record.
- Follow your own house rules first. Your organization's policy and any signed business associate agreement override anything a briefing or a vendor tells you.
A realistic first week
If you want a safe place to start, do not rebuild your whole documentation routine at once. Pick one note type that you write often and that is straightforward, and try the four-step workflow on it for a few patients at the end of clinic. De-identify the content, let the tool draft, read it hard, and type the final note into the EMR yourself. Notice how much editing it actually needed. That edit time is your honest measure of whether the tool is saving you anything, which is the same lesson the UCLA trial taught at scale. Build from the note types where it clearly helps, and skip the ones where it does not.
Done this way, AI charting is a series of small, reviewed wins that give you evening time back without putting a patient's privacy at risk. If you want the full method laid out step by step, with the de-identification habits, the prompt patterns, and the review checklist built in, that is exactly what the course Cut Charting Time with AI: Practical Notes for Physicians is built to give you. For the broader pattern of drafting with AI while a professional stays accountable, the companion briefing on how HR teams use AI safely shows the same draft-and-review discipline in another field, and the full set lives in The Briefings.
Frequently Asked Questions
Can I put patient information into a general AI tool like Claude?
No. Treat any identifier as off limits in a general AI tool, including the name, date of birth, medical record number, address, phone number, and full dates tied to the patient. De-identify the visit content first. You can describe the clinical picture in general terms, get a strong draft, and never expose who the patient is. No mainstream consumer chatbot is, by itself, a certified HIPAA-compliant medical record, so confirm your organization's policy and any signed agreement before going further.
Does AI really save physicians documentation time?
It can, and the savings are real but earned. The Permanente Medical Group reported an estimated 15,700 documentation hours saved across roughly 2.5 million encounters in a NEJM Catalyst study. A UCLA Health randomized trial found one ambient scribe cut time in the note by about 10 percent while a second tool showed no clear time benefit. The takeaway is that results depend on the tool and the review discipline, not on the tool alone.
What is a safe AI charting workflow?
Four steps. De-identify the visit content so no identifiers go into the tool. Let the AI draft a clean, structured note. Verify every clinical fact, medication, dose, and plan against what actually happened. Then type the finished note back into the EMR yourself. A two-window habit keeps the tool and the real record separate, so the patient's privacy stays protected and you remain the author of record.
Who is responsible if the AI gets a clinical fact wrong?
The physician. AI can write a confident sentence that is simply wrong, so the verification step is a clinical safeguard, not a formality. Read every draft as the clinician of record, correct anything that is not true, and sign only what you have confirmed. The tool drafts the language. You own the note.
What is computer-assisted physician documentation?
Computer-assisted physician documentation, or CAPD, is software that reviews your note as you write it inside the EMR and prompts you for missing detail, a more specific diagnosis, or information a coder will need. It does not write the note for you. It improves the note you are already authoring. That makes it different from an ambient AI scribe, which drafts a note from the conversation, and from a general assistant like Claude, which drafts from de-identified content you provide. In all three cases the physician still reads, corrects, and signs.
What are the different types of clinical documentation AI tools?
There are four common categories. Ambient AI scribes listen to the visit and generate a draft. General AI assistants turn de-identified visit content into a structured draft after the fact. Computer-assisted physician documentation prompts you for specificity while you write. Clinical documentation integrity programs, usually specialists supported by software, make sure the record accurately reflects the patient's condition. They differ in how much they write and where the data lives, but they share one rule: the clinician is the author of record and signs only what they have verified.
How do you de-identify a clinical note for a general AI tool?
Remove anything that could point to one specific patient before the content goes into the tool. HIPAA's Safe Harbor method lists eighteen identifier categories to strip, including names, all dates tied to the patient except the year, ages over 89, medical record and account numbers, contact details, and full-face photos. Describe the clinical picture in general terms instead. A sixty-year-old with a two-week cough and the relevant findings gives the tool everything it needs to write a strong draft and exposes nothing about who the patient is. Then type the finished note back into the EMR yourself.
One clear briefing a week on the AI moves that affect your work
Plain English, written for working professionals. Each issue gives you what changed, why it matters for your field, and one ten minute win you can use the same day. No noise, no hype.
Want the full playbook behind these briefings? The Leverage Club is a working library of briefings, prompts, and quick wins with a member feed. Forty nine dollars a month, or free while you are enrolled in any course.
Sources and notes. Kaiser Permanente / The Permanente Medical Group figures: "Ambient Artificial Intelligence Scribes: Learnings after 1 Year and over 2.5 Million Uses," NEJM Catalyst (catalyst.nejm.org/doi/abs/10.1056/CAT.25.0040), reporting more than 7,000 physicians, about 2.5 million encounters, and an estimated 15,700 documentation hours saved over roughly a year, with most surveyed physicians reporting better patient connection and job satisfaction; summarized by the American Medical Association as approximately 15,000 hours ("AI scribes save 15,000 hours and restore the human side of medicine," ama-assn.org). UCLA Health figures: "A Randomized-Clinical Trial of Two Ambient Artificial Intelligence Scribes," published in NEJM AI (PubMed 40672471; UCLA Health news release, uclahealth.org), covering 238 physicians across 14 specialties and about 72,000 encounters, with one scribe reducing time in the note by roughly 10 percent and the second showing no clear time benefit. Figures are reported by the cited sources and summarized here for general information. This briefing is general information for physicians and is not legal, compliance, or clinical advice. Confirm your own organization's policy and any vendor agreement before using any AI tool with patient information. Primary sources for this update. HIPAA de-identification, Safe Harbor (18 identifiers): U.S. Department of Health and Human Services, Office for Civil Rights, "Guidance Regarding Methods for De-identification of Protected Health Information" (hhs.gov). Augmented intelligence framing and physician accountability: American Medical Association, "Augmented intelligence in medicine" and the AMA principles for AI (ama-assn.org). EHR documentation integrity and named accountability: Centers for Medicare & Medicaid Services, Medicaid Program Integrity, "Documentation Matters Toolkit / EHR documentation integrity" (cms.gov), with supporting HHS-OIG findings on copy-and-paste (OEI-01-11-00571). Clinical documentation integrity definition: American Health Information Management Association (ahima.org). First accrediting-body guidance on responsible AI use (voluntary, September 2025): The Joint Commission and the Coalition for Health AI (jointcommission.org). CAPD is described here as a software category (real-time prompts while you author in the EMR); the CAPD versus ambient-scribe contrast is analyst-level synthesis, not a regulated definition.
Related 2026 AI Briefings
When AI scribes need patient consent · FDA eased AI rules, now the doctor is the backstop · AI scribes hallucinate: a 90-second review · Is your AI scribe upcoding you? · AI charting rules 2026: what your state requires