Choose which optional cookies and similar storage we may use. Strictly necessary storage is always on, because the site cannot work without it.
Talk to us

Trust centre

Before you trust any AI supplier with your patients, your members or your data, you should be able to see how they work. This is where we show ours.

Last updated

  • Security

    The controls that protect the systems and data we are responsible for.

  • Privacy

    A plain-English summary of how we handle personal data.

  • Clinical safety

    How we manage clinical risk under DCB0129, and who leads it.

  • Responsible AI

    Where we use AI, how people oversee it, and how we tell you.

  • Standards

    Our exact status against each standard and scheme.

  • Climate action

    Net zero by 2045, our footprint and our targets.

  • Subprocessors

    The third parties that process data for us.

Standards at a glance

See the full standards table
Standard or scheme Our status
DCB0129 Prime Assist has a clinical safety case under DCB0129
DCB0160 [TO CONFIRM: What we provide to support customers' DCB0160 work, now offered as clinical safety for AI you deploy.]
Digital Technology Assessment Criteria (DTAC) [TO CONFIRM: DTAC version and date for Prime Assist.]
Data Security and Protection Toolkit (DSPT) [TO CONFIRM: Exact published status and year.]
ISO/IEC 27001 [TO CONFIRM: Certifying body]
Cyber Essentials [TO CONFIRM: Cyber Essentials or Cyber Essentials Plus]
ICO registration Registered with the ICO, the UK data protection regulator, registration number ZB592265
WCAG 2.2 AA Our target for this website
EU AI Act transparency (Article 50) We tell people when they are dealing with AI: our voice agents say so at the start of every call, chat assistants label themselves, and AI-generated content we publish is labelled where relevant.

Request documents

Customers and prospective customers can request a document pack under a non-disclosure agreement.

Draft (F27): Contents of the document pack (for example DTAC submission, clinical safety case summary, DSPT status, ISO certificate, penetration test summary, data processing agreement).

[TO CONFIRM: contents of the document pack]

Request the document pack

Contacts

Privacy
[TO CONFIRM]
Clinical safety concerns
[TO CONFIRM: for example clinicalsafety@gateway-global.co.uk]