Clinical AI Exposure Diagnostic™ with Ambient Scribe Assessment

Ambient scribing is not dictation. It is AI-enabled clinical documentation support.

Clinics adopt it for good reasons: more eye contact, less typing, better consultation flow, faster documentation. That benefit needs to be matched by a documented governance position covering patient transparency, data protection, vendor evidence, human review and clinical ownership.

NHS England's ambient scribing guidance is written for health and care settings in England and is primarily NHS-focused. For private clinics it is a governance-standard signal rather than a mandate, and a strong one, particularly where CQC-regulated workflows, NHS contracts, NHS data-sharing arrangements or NHS systems access are relevant. The guidance describes ambient scribing products used for clinical or patient documentation and workflow support, and is written for supervised organisational adoption rather than unauthorised individual use.

In clinics using or planning ambient scribes, the same gaps appear repeatedly:

• The scribe is already live, but the supplier's data processing agreement, sub-processor list, hosting and data-residency information, retention terms and model-training position are not held in one place.
• A DPIA has not been started, or has been started informally without DPO involvement.
• Patient transparency is verbal and inconsistent. There is no standard wording for how patients are informed before recording, transcription or AI-assisted note generation.
• Clinicians use different tiers of the same product without the clinic knowing which tier is in use.
• Local clinical safety arrangements have not been documented or mapped to the scribe workflow.
• There is no documented human-review workflow before AI-generated notes enter the patient record.
• Incident reporting does not cover hallucinated content, inaccurate summaries, transcription error, wrong-patient risk or data exposure.

None of this is unusual. Adoption has moved faster than the evidence base.

This engagement exists to move the clinic from informal AI use to a documented governance position.

Ambient Scribe Pre-Go-Live Checklist: practical items to have ready before routine use.

The risk is not simply that an ambient scribe is being used. It is that the clinic may be unable to show who is accountable for that use, how patient information is protected, how clinicians remain in control and what evidence supports the clinic's position.

This engagement provides a structured, board-ready assessment of:

• which ambient scribe, transcription and note-generation tools are in use, including use not fully visible to leadership
• who owns ambient scribe governance decisions and whether responsibilities are clearly documented
• how patient audio, transcripts and generated notes are handled across the workflow
• whether the clinic holds supplier, contractual, data protection and clinical safety evidence, and where gaps exist
• whether any DPIA work has begun and what determination or review remains with the clinic's DPO
• whether patients are informed consistently and have a clear route to raise concerns or decline use
• whether clinicians remain accountable for reviewing and approving AI-generated content before it enters the patient record
• whether staff have clear guidance on permitted use, review expectations and escalation
• whether incidents, errors and recurring concerns are identified, recorded and acted upon
• whether the clinic can respond with evidence when questioned by its DPO, board, inspector, MDO or insurer
• what should be prioritised during the next 30 days, with named owners and target dates

The outcome is a documented governance position showing what is known, what is evidenced, where uncertainty remains and what action should follow.

The engagement is designed for a defined clinic profile so that the work can be completed properly within six working days.

The fee covers:

• One clinic site
• Up to 60 staff
• One ambient scribe or transcription product, on one tier
• Up to eight clinicians using the scribe
• Up to three other AI tools or use cases
• Up to three other suppliers requiring evidence review
• Up to 25 evidence documents
• One clinical specialty: GP, dental, dermatology or a comparable single regulated care area
• No NHS contract or NHS data-sharing arrangement in scope

The engagement also requires a named Clinical Safety Officer, clinical governance lead or responsible clinician available for one conversation of up to 60 minutes. Human review and clinical safety ownership cannot be assessed from documents alone. If nobody can be named, that is recorded as a finding and the engagement proceeds with the limitation stated.

Larger or more complex scopes

A fourth AI tool is assessed at an additional £500 + VAT.

Two or more scribe products, multi-site rollouts, larger teams, mixed clinical specialties, larger evidence sets or NHS arrangements are scoped separately.

You see the confirmed position before work starts. Once the delivery clock begins, the agreed fee does not change.

£8,500 + VAT. Six working days from the start of delivery.

A separate six-working-day engagement. The ambient scribe assessment runs through the full evidence pack, not as a standalone addition.

The fee is fixed for work inside the scope above. It is confirmed in writing at intake, before the delivery clock starts, and it does not change once the clock has started.

The higher fee relative to the Standard Diagnostic reflects the scribe-specific review work: supplier evidence at greater depth, the Assessment Sheet, the local clinical safety position and the patient transparency review.

Completed intake means the required intake, staff survey and evidence collection are complete, the clinical lead conversation is scheduled, and the confirmed scope, fee and delivery window have been agreed in writing.

A 60-minute remote readout follows, normally 24 to 48 hours after delivery, so your leadership team has time to read the findings before discussing them.

View pricing details

Leadership usually knows which product the clinic has purchased. It may not see which tier each clinician is using, whether anyone is using a personal account, or whether a second transcription tool has appeared alongside the approved one.

The survey is confidential, role-level and non-disciplinary. Responses are never attributed to named individuals, and no staff-identifying information appears in the deliverables. A written non-disciplinary commitment from clinic leadership is required before the survey runs.

The purpose is not to identify individual clinicians. It is to establish the clinic's actual position, and whether staff have a clear approved route for using AI safely.

ELSA AI provides advisory governance support only. It does not:

• Sign off DCB0160 clinical safety cases. That responsibility sits with the clinic's appointed Clinical Safety Officer or responsible clinical lead
• Author a hazard log or clinical safety case
• Certify a supplier's DCB0129 position or MHRA medical device status
• Classify any product as a medical device or SaMD
• Determine legal compliance with UK GDPR, the Data Protection Act 2018 or other legislation
• Provide CQC, ICO, NHS or MHRA approval
• Provide a completed or signed DPIA
• Determine insurer coverage, underwriting or MDO indemnity support
• Provide penetration testing or security testing
• Certify, endorse or rank any supplier
• Provide certification or any guarantee of compliance
• Replace the clinic's DPO, legal counsel, Clinical Safety Officer or accountable officers

RAG ratings identify evidence positions and priorities for action. A Red rating does not mean that a breach, illegality, regulatory failure or loss of indemnity support has been confirmed. A Green rating does not provide a clean bill of health.

Final legal, data protection, clinical safety, regulatory, insurer and indemnity decisions remain with your DPO, legal counsel, Clinical Safety Officer, accountable officers, insurers, medical defence organisation and clinicians as applicable.

ELSA AI structures the evidence so it can be reviewed, owned and signed off by those parties. It says what it found, what it means and what to do about it. You decide.