Certified & Compliant

GPAtlas Ltd · Security & Clinical Safety

Trusted. Certified. Verifiable.

Others assert it. We prove it. Every credential below carries its registration number and links to the public register that confirms it, so you never have to take our word for anything.

Every item verifiable. Ask us for the evidence.

MHRA registrations

Clinical hazards assessed and controlled

Clinical safety review, in operation

Adverts, sponsors or data sales

Built by practising UK GPs who carry the same clinical responsibility you do. We hold two MHRA registrations, a UK Government cyber certification and an independent security assessment, and we run clinical safety as a live process rather than a folder. Everything on this page can be checked.

Verify on the MHRA register →

Two products registered with the MHRA as Class I medical devices under UK MDR 2002: Ask Expert (GMDN 61087) and Whisper (GMDN 36216). Registration is a legal status we hold, not an endorsement or approval by the MHRA, and we never describe it as one.

Cyber Essentials Certified

Independently certified against the UK Government’s NCSC Cyber Essentials scheme, whole organisation, assessed by a third party and renewed every year. Not a self-assessment. Certificate

52fac765

Independently penetration tested by a CREST-accredited provider. The assurance letter is available to practices and NHS organisations on request.

A named Clinical Safety Officer who is a GMC-registered practising UK GP, not an outsourced title. A hazard log under DCB0129 covering 15 assessed hazards, each with its controls and residual rating. Every release passes change control before it ships.

Most suppliers hold a post-market surveillance document. Ours operates: clinical safety events are recorded against their hazard automatically, and the Clinical Safety Officer receives a written review every week, including the weeks when nothing happened. A quiet week is evidence too.

Verify on the ICO register →

Registered with the Information Commissioner’s Office as a data controller, reference ZC021226. Data Protection Impact Assessments completed for the AI tools. Privacy by design, and every data-subject right honoured.

GPAtlas Ltd is a British company (16587886), built and run from the UK by practising UK GPs, with a UK Clinical Safety Officer and administrative access from the UK only.

Every server, every backup and every AI service we use sits within the UK or the EU

Our completed NHS Digital Technology Assessment Criteria response pack covers clinical safety, data protection, technical security, interoperability and usability. DTAC is an assessment

organisation carries out on a supplier, so we do not award ourselves a badge for it. We simply have every answer written, evidenced and ready to send the day you ask.

Encrypted in transit and at rest. Consultation audio is transcribed and then deleted, and we

stamp the moment each deletion is confirmed

Nothing you or your patients say is used to train AI models, by us or by any provider we use.

Paid audio and video are served through links that expire.

Administrative access requires two-factor authentication and is exercised from the UK. Access to premium and clinical data is checked on every request rather than hidden in the interface, and account activity is logged and reviewed.

See the evidence →

We do not just claim quality. We publish the real figures behind every Ask Expert answer: sources per answer, the share drawn from trusted UK guidance, and live citation checks.

Your information governance team will ask. We are ready.

Practices, ICBs and insurers can have our DTAC response pack, our clinical safety case and hazard log, our Data Protection Impact Assessments and our independent security assurance letter. Sent privately, usually the same day you ask. Complete, written already, and straight answers to anything else you need.

Request the assurance pack

Talk to us

Independent · No advertising

GPAtlas accepts no advertising or sponsorship and is not affiliated with any pharmaceutical or commercial body. We do not sell data. Built and funded by practising UK GPs.