Lightning Dictation Edge extension security report

Lightning Dictation Extension: Integrated Dictation for Medweb PACS Reports The Lightning Dictation Extension is a highly specialized productivity tool designed exclusively for clinical professionals using the Medweb PACS system and its Custom Report Editor. Single Purpose: To enable high-speed voice-to-text dictation and seamless insertion of the resulting clinical transcript directly into the Medweb Custom Report Editor. Functional Overview (Technical Necessity): This extension serves as the mandatory communication bridge between the Medweb PACS web application and the locally installed Lightning Dictation (LD) desktop program (which uses a Python WebSocket for communication). This specialized architecture is necessary to deliver secure, integrated dictation. Script Injection: The extension utilizes its permissions, restricted to approved Medweb servers, to inject a secure, minimal script into the Custom Report Editor interface. External Communication: The extension enables the Python WebSocket app (LD) to communicate with this injected script to send transcription data and control the report editor. Secure Text Insertion: The script receives the finalized text transcript from the LD program and inserts it directly into the active text field of the Medweb report, ensuring the dictated content lands accurately and efficiently. Strict Requirements & Restricted Use: This extension is inoperable outside of a configured Medweb clinical environment. It is not for general web use. Host Environment: Must be accessing an approved Medweb PACS server. Server Configuration: The Medweb server must have the "use express transcription" setting enabled. Required Application: The Lightning Dictation (LD) desktop program (Python WebSocket app) must be installed and running on the host PC. Data Handling & Security (PHI Compliant): As detailed in our Privacy Policy Addendum, the extension is designed for HIPAA-compliant workflows. It processes data transiently and communicates only with the trusted, installed LD program and the local Medweb instance. No transcribed text (PHI) is ever transmitted to external, unauthorized third-party servers.