The trust people place in you deserves proof.

The short version.

Training

Wai does not use patient data to train models. Calls through the model router carry zero retention and no training flags.

Live

Audio

Audio recorded in the room stays on the device and is deleted once its transcript is saved, or at the end of the clinic's retention window, seven days by default. A recording of a platform call is kept with the medical record.

Live

Where data goes

Hosting and region are agreed with each clinic before go-live. Some processors run outside the clinic's region, and each is listed below.

Live

Clinical scope

Wai holds to its intended purpose in code. A scope guard refuses device functions, and no clinical task runs without a named person.

Live

What we hold, and what we do not.

SOC 2 Type II

Report on request, under a mutual non-disclosure agreement.

Held

ISO 27001

No certificate and no audit under way.

Not held

ISO 42001

No certificate and no audit under way.

Not held

Cyber Essentials Plus

No certificate held.

Not held

NHS DSPT

Answered for your organisation and intended use.

On request

DTAC

Answered for your organisation and intended use.

On request

DCB0129

Safety case, hazard log and incident log are open, with a Clinical Safety Officer in post. The case report is not yet approved.

In progress

UK GDPR and EU GDPR

Data processing agreement and impact assessment template available.

Applies

HIPAA

No body certifies HIPAA. A business associate agreement is signed before anything goes live.

Applies

Safety, on the record.

Clinical Safety Officer

Appointed 18 October 2026.

Live

Hazard log

109 hazards recorded, each with its controls.

Live

Evaluation cases

99 cases run against the agents.

Live

Device-function probes

15 probes hold the scope guard to its boundary.

Live

Safety documents

Agent actions, Clinical risk management plan, Clinical safety case, DCB consultation position, Hazard log, Safety incident log, Third party assessment.

On request

How your data is protected.

Infrastructure

Encryption

AES-256 at rest and TLS 1.3 in transit.

Live

Application hosting

Clinical applications run in the London region.

Live

Organisational

Engineering access

Through a separate credential, never a clinic's.

Live

Internal procedures

Dependency updates

Grouped update each week for the workspace and each month for build tooling.

Live

AI security and compliance

Router guard

A clinic that declares a jurisdiction with no endpoint behind it is refused, never silently rerouted.

Live

Product

Named approval

A clinician signs every note and letter before it counts.

Live

Data and privacy

Audit chain

Audit rows are chained by a database trigger, so a changed row breaks the chain.

Live

Withdrawing consent

A patient's withdrawal stops capture, deletes the audio and deletes what the recording became.

Live

Your people stay in charge.

Who decides

The doctor signs every note and letter. Clinical replies are made with a clinician.

Live

Autonomous clinical tasks

None. The set of task types allowed to run alone is empty.

Live

Who can see identifiable data.

Clinic staff

See what their role allows, enforced in the database.

Live

Wai engineers

Reach systems through a separate credential, and access is logged.

Live

Processors

Only the data each needs for the purpose listed under sub-processors.

Live

Everyone we work with.

Supabase

Primary database, authentication and file storage

Per agreement

Vercel

Application hosting and delivery

London for clinical apps

Railway

Background worker behind the clinical queue

Per agreement

Anthropic

Models behind clinical drafting and agents

Per agreement

OpenAI

Models and embeddings behind search and drafting

Per agreement

OpenRouter

Model routing for alternative drafting tiers

Per agreement

Pinecone

Vector search across guidelines and clinical knowledge

Per agreement

Deepgram

Speech to text for calls and dictation

US by default, EU available

Soniox

Speech to text on voice routes

US by default, EU available

Recall.ai

The notetaker that joins a consultation

US (us-west-2) by default

SendGrid

Transactional and clinical email

Per agreement

Resend

Transactional email on newer paths

Per agreement

Twilio

Voice calling and messaging

Per agreement

WhatsApp, through Meta

Patient messaging where a patient writes there

Per agreement

Stripe

Card payments and checkout

Per agreement

Google, including Firebase

Authentication, calendar and push

Per agreement

Apple

Push notifications to native apps

Per agreement

Slack

Internal notification, where a draft under review can carry patient detail

Per agreement

Sentry

Application error reporting

Per agreement

SignatureRX

Electronic prescribing

Per agreement

Per agreement means the region is confirmed in the data processing agreement for your clinic.

Where your data goes, and when it leaves.

Device audio

Deleted once the transcript is saved, or at the end of the retention window, seven days by default.

Live

Retention, deletion and exit

Agreed in the data processing agreement, including return of data when a clinic leaves.

On request

How we keep it that way.

Updates

A grouped dependency update each week.

Live

Independent penetration test

No independent report is held. The testing that exists is ours.

Not held

Independent accessibility audit

No independent audit is held.

Not held