Book a demo
Security and compliance

Safe, secure and built for clinical confidence.

CLAI is designed around NHS assurance requirements, controlled data handling and the principle that clinicians remain responsible for every output.

Before EPR submissionReview

Documents, codes and actions remain under clinical oversight before finalisation.

NHS assurance

Clear credentials. Careful language.

CLAI is listed on the NHS England AVT Supplier Registry and maintains the assurance controls required for use in NHS workflows.

MHRA Class I

Registered medical device with its intended use and clinical controls documented.

DTAC

Compliant with the Digital Technology Assessment Criteria used by NHS organisations.

DSPT

Aligned with the Data Security and Protection Toolkit requirements.

GDPR

Data protection controls designed around the handling of sensitive health information.

Cyber Essentials Plus

Independently assessed protection against common cyber security threats.

NHS England registry

Listed on the national self-certified Ambient Voice Technology Supplier Registry.

Security by design

Protection throughout the workflow.

Data handling, retention and access controls are designed into the service rather than added at the end.

Encryption

Sensitive data is encrypted in transit and at rest throughout the active workflow.

UK data residency

Patient information is processed and stored in the United Kingdom.

Controlled retention

Audio is removed after successful transcription and completed sessions are deleted under configured retention controls.

Role-based access

Authentication and organisation-scoped permissions protect access to clinical workflows.

Clinical oversight

Generated documentation, codes and actions are reviewed before submission.

PHI-safe operations

Operational logging is designed to avoid patient health information and support safe monitoring.

Clinical control

AI drafts. Clinicians decide.

CLAI supports documentation and workflow automation; it does not remove professional responsibility. The clinician reviews the letter, coding and follow-up actions, corrects anything required and decides what is submitted.

  • Edit transcripts and generated documentation
  • Add, remove or replace suggested codes
  • Approve appropriate follow-up actions
  • Finalise before EPR submission
01

Capture

The clinical conversation is recorded securely.

02

Generate

CLAI prepares relevant documents and structured suggestions.

03

Validate

The clinician checks the outputs against the consultation.

04

Submit

Only finalised content is written to the connected record.

Security questions

What services need to know.

Is CLAI listed on the NHS England AVT Supplier Registry?

Yes. CLAI Ltd appears on the national self-certified supplier registry. Inclusion supports local procurement and assurance but is not an NHS endorsement.

Where is data hosted?

CLAI provides UK data residency and encrypts sensitive information in transit and at rest.

How long is audio retained?

Audio is deleted after successful transcription. Clinical-session data is removed after completion or under the configured maximum retention period.

Does CLAI submit content automatically?

No. The clinician reviews and finalises the relevant documentation and actions before EPR submission.