Who this is for
- Clinics using or planning Heidi, Tortus, Accurx Scribe, Microsoft Dragon Copilot (formerly DAX Copilot), Tandem, Nabla, Otter or similar tools
- Private GP and GP-led clinics
- Specialist clinics
- DPOs, clinical leads, practice managers and boards
Evidence to have ready before routine use
Checklist
- Tool name, use case and clinical workflow documented
- Licence tier confirmed: free, professional or enterprise
- Supplier DPA obtained
- Sub-processor list obtained
- Data residency and hosting position confirmed
- Retention and deletion position confirmed
- Model-training position confirmed
- DPIA screening completed
- DPIA likely required or strongly indicated where high-risk processing indicators apply
- Patient transparency wording agreed
- Objection or dissent route considered where applicable
- Clinician review workflow documented
- AI-generated notes reviewed before entering the patient record
- AI incident route established
- Clinical safety ownership identified
Why this matters
Ambient scribes should not be treated as simple dictation tools. They can introduce evidence questions across data protection, patient transparency, clinical records, human oversight, vendor assurance and incident management. NHS England ambient scribing guidance is primarily NHS-focused, but it provides a useful governance-standard signal for private healthcare providers adopting similar clinical AI workflows.
Common evidence gaps
Common evidence gaps in private healthcare providers adopting ambient scribes
- Scribe live before DPIA review
- Vendor evidence held only by one clinician or not held centrally
- Patient explanation is verbal and inconsistent
- No documented human-review workflow
- No incident route for hallucinated or inaccurate notes
- No board-level benefit-risk review
- Clinical safety ownership unclear
Next step
If a rollout is imminent or already live, start with the ambient scribe assessment. For the go-live questions clinics face first, use the rollout scenario page.
ELSA AI provides advisory governance support only. It does not provide: legal advice or legal sign-off; CQC, ICO or NHS approval; insurer coverage or underwriting decisions; MDO indemnity decisions; a completed or signed DPIA; clinical safety case sign-off, DCB0160 authorship or appointment as Clinical Safety Officer; medical device or SaMD classification; certification or any guarantee of compliance. Final legal, data protection, clinical safety, regulatory, insurer and indemnity decisions remain with the client's DPO, legal counsel, Clinical Safety Officer, accountable officers and clinicians.