Clinical safety & security
Trust is a gate, not a slogan.
Human review, audit trails, and honest compliance language for clinical deployments — without inventing certifications.
- Audit trail on every decision
- Draft until a clinician decides
- UK data residency
- Built for diabetes & primary care
How we govern clinical outputs
Safety controls that stay visible
Compliance badges describe aligned design pathways and control mapping. They do not represent certification, accreditation, or regulatory approval. This page describes design posture — not regulatory approval.
Human-in-the-loop on every clinical output
Supporting intelligence drafts. A named reviewer must Accept, Edit, or Reject before anything can affect a care record.
- Draft-only until a named clinician decides
- No autonomous diagnosis, prescribing, or treatment
Immutable audit trail
Who drafted, who reviewed, and what they decided — recorded so governance teams can reconstruct the path.
- Capability, timestamp, and reviewer on every decision
- Zero auto-writes: drafts never self-commit
Clinical safety case (in progress)
Workflow design follows hazard-aware clinical safety practice. A signed-off safety case is not complete for this build. Optional UK NHS-ready pathways (e.g. DCB0129-style rehearsal) remain secondary scaffolding — not approvals.
- Hazard log is internal — not a public certificate
- Production EHR write-back stays gated until organisation sign-off
GDPR Art. 9 special category data
Health data is treated as special category information: purpose limitation, minimisation, and tenant isolation for organisation deployments.
- UK/EU residency framing for healthcare workloads
- Encryption in transit and at rest; role-based access
What we do not claim
Honest limits
If a badge or sentence would overstate status, we leave it out.
- MHRA certification, registration, or device marking
- Completed clinical safety case sign-off (including DCB0129)
- Approved DTAC or equivalent procurement assessment outcome
- CQC readiness or inspection evidence
- Live production write-back to any EHR in this public build
- Autonomous diagnosis, prescribing, or treatment decisions
- A validated physiological digital twin — precision-health is scaffolding, not a live digital twin claim
Precision-health work in this product is phased scaffolding — not a live digital twin claim, and not a validated physiological digital twin. Platform overview
Review the safety posture with your team
Walk the Patel case for human-in-the-loop in context, or request organisation access.