How to Choose a Transcription Service That Meets IRB Standards


How to Choose a Transcription Service That Meets IRB Standards
Beth Worthy

Beth Worthy

4/22/2026

Most research teams approach transcription as a logistical step. Recordings are completed, deadlines approach, and the next task is to convert audio into text. The selection of a transcription vendor often depends on cost or turnaround time.

This approach introduces risk.

IRB approval defines how participant data is collected, used, and protected. Consent forms establish clear expectations regarding confidentiality and access. When recordings are uploaded to a transcription platform that does not meet these conditions, the research process falls out of compliance.

An IRB-compliant transcription service supports the commitments made in the research protocol. Choosing a vendor becomes a compliance decision that directly affects the integrity of human subjects research.

What IRBs Are Actually Concerned About

IRBs evaluate research through the lens of participant protection. The consent form serves as the framework for this evaluation. It defines how participant data will be handled and establishes the boundaries of its use.

Transcription intersects with several key IRB concerns.

1. Data Access

Consent forms often specify that only the research team will access participant recordings. When audio is uploaded to an external platform, additional parties gain access to that data. If this access is not disclosed in the consent form, it introduces a protocol deviation.

2. Data Storage and Retention

IRBs increasingly require that identifiable data be stored on secure, institution-approved systems. Commercial transcription platforms may store recordings on external servers, sometimes across jurisdictions. This creates uncertainty about where participant data resides and how long it is retained.

3. Secondary Use of Data

Some transcription platforms use uploaded audio to train AI models. This introduces a secondary use of participant data that is not covered by most consent forms. Participant voices may be used beyond the original research purpose.

 

Ready to Get Started?

Talk to our team about secure, accurate legal transcription by human experts.

4. The Emerging AI Disclosure Requirement

Many IRBs now include explicit questions about the use of AI tools in data processing. Researchers must disclose whether participant recordings will be processed through automated systems.

Failure to disclose this use creates a compliance gap. If a researcher indicates that AI tools will not be used and later uploads recordings to an AI transcription platform, the research no longer aligns with the approved protocol.

In this context, institutional review board transcription requirements are expanding to include greater transparency about data processing methods.

The Vendor Evaluation Checklist

Selecting a transcription service that aligns with IRB standards requires a structured evaluation process. Each vendor should be assessed against clear compliance criteria before any data is shared.

1. Data Processing Location

Determine where recordings will be processed. Many federally funded research projects require US-based data handling. Offshore processing introduces additional regulatory considerations and may conflict with institutional policies.

2. Personnel Access

Identify who will have access to participant recordings. A compliant vendor should provide clear documentation on how transcriptionists are vetted and trained. Access should be limited and controlled.

3. AI Usage

Clarify whether AI is used at any stage of transcription. If AI is involved, determine whether recordings are used to train models. This information should be documented in writing to ensure alignment with consent form commitments.

4. Data Retention Policies

Understand how long the vendor retains uploaded files. A defined deletion process ensures that participant data is not stored beyond the necessary timeframe.

5. Data Processing Agreements

A vendor should be able to execute a Data Processing Agreement that defines how recordings will be handled. This agreement should explicitly prohibit secondary use of data and outline security measures.

6. Subcontracting Practices

Determine whether the vendor uses subcontractors. If subcontractors are involved, they must adhere to the same data protection standards.

7. Breach Notification Protocols

A compliant vendor should have a clear process for handling data breaches. This includes notification timelines and mitigation procedures.

8. The University IT Approval Layer

IRB approval is one part of compliance. Many institutions also require review by IT security teams. These teams evaluate whether external vendors meet institutional data governance standards.

A transcription vendor that has not undergone an IT review may introduce additional risk, even if IRB approval has been secured.

Why Human Transcription Simplifies Compliance

Human transcription conducted within a controlled environment simplifies compliance requirements.

A vendor that offers:

  • US-based transcriptionists
  • No AI processing
  • No use of data for model training
  • Controlled access to recordings

reduces the complexity of compliance.

This approach aligns more closely with consent form commitments and eliminates the need to address AI-related data usage concerns.

For human subjectsresearch transcription, simplicity in data handling often leads to stronger compliance outcomes.

Practical Tip

Before submitting your next IRB protocol, review your consent form language related to confidentiality and data use.

If the consent form states that recordings will be used only for research purposes and accessed only by authorized personnel, your transcription vendor must be able to provide the same assurance in writing.

A signed Data Processing Agreement should be secured before any recordings are shared.

What a Compliant Transcription Workflow Looks Like

Compliance requires a structured workflow that aligns with IRB expectations.

A compliant process includes:

  • Identifying transcription as a formal data processing activity within the IRB protocol
  • Reviewing consent form language to ensure alignment with vendor practices
  • Evaluating transcription vendors using a defined compliance checklist
  • Executing a Data Processing Agreement before transferring any data
  • Storing completed transcripts within institution-approved systems
  • Maintaining documentation of vendor selection and compliance decisions

This workflow creates a clear audit trail. If questions arise during review or audit, researchers can demonstrate that decisions were made with compliance in mind.

Conclusion: Compliance Starts with Vendor Selection

IRB compliance remains the responsibility of the researcher. Every decision involving participant data must align with the approved protocol.

Selecting an IRB-compliant transcription service supports this responsibility by ensuring that data-handling practices align with consent form commitments.

GMR Transcription (GMRT) provides human transcription services designed for research environments. With US-based transcriptionists, no AI processing of participant audio, and the ability to execute Data Processing Agreements, GMRT supports compliance across academic and institutional research settings.

Preparing an IRB submission? Request information on GMRT’s IRB-compatible transcription process and ensure your research workflow aligns with human subjects requirements from the start.

 

Get Latest News & Insights Sent Directly To Your Inbox

Related Posts


Beth Worthy

Beth Worthy

Beth Worthy is the Cofounder & President of GMR Transcription Services, Inc., a California-based company that has been providing accurate and fast transcription services since 2004. She has enjoyed nearly ten years of success at GMR, playing a pivotal role in the company's growth. Under Beth's leadership, GMR Transcription doubled its sales within two years, earning recognition as one of the OC Business Journal's fastest-growing private companies. Outside of work, she enjoys spending time with her husband and two kids.