Design a secure pipeline for medical audio

Design the system that takes audio recorded during a doctor's visit, uploads it, processes it (for example transcription and note generation) and stores the results. Patient data is involved, so cover encryption in transit and at rest, access control, auditing, retention and deletion, and what compliance requires, along with reliability for uploads over poor connections.