Is my health information safe when AI is used?

Yes. NowPatient uses AI through a purpose-built harness rather than ad hoc integrations, such as pasting data into public chat tools or wiring model calls directly into application code. The harness is a single governed layer between our products and the underlying frontier models, designed around the requirements of US HIPAA and the NHS's Digital Technology Assessment Criteria (DTAC) and Information Governance (IG) standards. Access is role-based and follows the minimum-necessary principle. Protected health information and patient-identifiable data are de-identified or redacted before they reach a model, and data is encrypted in transit and at rest, with processing held within agreed jurisdictions and under contractual terms that prohibit 3rd party vendors from training on your data. Every request and response is logged in an immutable audit trail, supporting HIPAA audit controls and NHS expectations for transparency and accountability, while outputs are checked against clinical-safety and content guardrails, with human oversight built in where it matters. Because models, prompts, and permissions are managed centrally, we can evaluate, update, or swap a model, apply policy consistently across every product, and respond quickly to emerging risks without rebuilding each product, keeping our work aligned with UK GDPR, the Data Security and Protection Toolkit (DSPT), and clinical safety standards DCB0129 and DCB0160. The result is AI that is powerful, predictable, and engineered for the trust that patients on both sides of the Atlantic require.