Who this is for
- Private GP and GP-led clinics
- Dental practices and groups
- Doctor-led specialist clinics
- Clinics using or planning ambient scribes
- Practice managers, DPOs, boards and clinical governance leads
Board evidence
Checklist
- AI tool inventory
- One-page RAG exposure map
- Board or partner AI risk note
- Approved, conditional and prohibited use position
- Named owner for AI governance
- 30-day action plan
DPO and data protection evidence
Checklist
- DPIA screening record
- DPIA readiness note
- Records of Processing Activities indicators
- Vendor Data Processing Agreements
- Data residency and sub-processor information
- International transfer indicators
- Privacy notice and patient transparency wording
Vendor evidence
Checklist
- Supplier contract or terms
- Data Processing Agreement
- Sub-processor list
- Hosting and data residency confirmation
- Retention and deletion terms
- Model-training position
- Security assurance evidence
- Supplier clinical safety evidence, where applicable
Ambient scribe evidence
Checklist
- Scribe tool and licence tier
- DPIA status
- Patient explanation before use
- Human-review workflow
- Incident reporting route
- Clinical safety ownership
- Vendor evidence file
External review readiness
Checklist
- MDO, PMI and insurer disclosure-readiness note
- Incident process covering AI-related issues
- Staff guidance on approved and prohibited use
- Evidence of training or staff communication
- Source and guidance mapping appendix
What ELSA AI can help produce
The Clinical AI Exposure Diagnostic™ creates the first board-ready version of this evidence pack in four working days from completed intake.
Outputs include
- Board Findings Report
- RAG Exposure Map
- AI Tool and Use Case Inventory
- DPIA Readiness and Patient Data Exposure Note
- Vendor Data Position and Evidence Tracker
- Ambient Scribe Assessment Sheet, where applicable
- MDO, PMI and Insurer Disclosure Readiness Note
- 30-Day Priority Action Plan
- Source and Guidance Mapping Appendix
The issue is not simply that AI tools exist. The issue is having no documented governance position when someone asks how that AI use is controlled. Clinical AI Exposure Diagnostic™ page explains scope, timeline and fees.
Advisory governance support only. Not legal advice, DPIA sign-off, CQC certification, ICO approval, insurer coverage advice, MDO indemnity advice or clinical safety case sign-off. Final decisions remain with the clinic’s accountable officers and advisers.
Need this evidence mapped for your clinic?
The Clinical AI Exposure Diagnostic™ gives clinic leadership a board-ready view of AI use, patient-data exposure, evidence gaps and priority actions in four working days from completed intake.