Compliance

Safe by design, and on the record.

How Cypher keeps patients safe and their details secure. Every line on this page describes how the product works today.

Clinical safety
Built to DCB0129
- Cypher is built to the DCB0129 clinical safety standard, with a clinical safety case.
- A live hazard log: changes that could affect patient safety are assessed and recorded.
- NHS Pharmacy First follows the NHS England clinical pathways (version 2.5).
Clinical content
Signed off by a pharmacist
- Clinical content is signed off by a named pharmacist, and flagged for review if it changes.
- Every consultation asks the questions it needs: required questions can’t be skipped.
Information security
ISO 27001-aligned
- Information security runs to an ISO 27001-aligned management system, with a risk register.
- Patient details such as NHS numbers, email addresses, prescription details and message transcripts are encrypted at rest.
Access
The right people, on the record
- Role-based access for every member of your team.
- Clinical actions and changes to patient records are audit-logged.
- Clinical tasks follow each person’s role and registration, not just their login.
AI safeguards
Agents assist. Pharmacists decide.
- AI features are optional and switched on by each pharmacy.
- The consultation scribe removes the patient’s name and date of birth before anything is sent to the AI, and the pharmacist accepts every suggestion.
- WhatsApp messages that look like they contain personal details never reach the AI.
- The Phone Agent tells every caller it’s an automated assistant. Urgent symptoms get a fixed 999/111 message, not the AI.
Keeping data only as long as needed
Retention
- Phone calls are transcribed, not recorded. Identity details in transcripts are cleared after 30 days.
- Check-in kiosk details are deleted at the end of the day.
- Prescription-tracking details on WhatsApp are wiped after the lookup.
Consent
Patients in control
- WhatsApp marketing messages go only to patients who opted in.
- Replying STOP turns WhatsApp messages off, and START turns them back on.
- Every booking email has a link to cancel or rebook.
Hosting
Hosted in the EU
- The app and its database run in Frankfurt, Germany.
- Backups are encrypted and kept off-site in the EU.

Questions about safety or data protection?

Read our privacy policy and terms of service, or ask the team.

Compliance

Safe by design, and on the record.

How Cypher keeps patients safe and their details secure. Every line on this page describes how the product works today.

Clinical safety
Built to DCB0129
- Cypher is built to the DCB0129 clinical safety standard, with a clinical safety case.
- A live hazard log: changes that could affect patient safety are assessed and recorded.
- NHS Pharmacy First follows the NHS England clinical pathways (version 2.5).
Clinical content
Signed off by a pharmacist
- Clinical content is signed off by a named pharmacist, and flagged for review if it changes.
- Every consultation asks the questions it needs: required questions can’t be skipped.
Information security
ISO 27001-aligned
- Information security runs to an ISO 27001-aligned management system, with a risk register.
- Patient details such as NHS numbers, email addresses, prescription details and message transcripts are encrypted at rest.
Access
The right people, on the record
- Role-based access for every member of your team.
- Clinical actions and changes to patient records are audit-logged.
- Clinical tasks follow each person’s role and registration, not just their login.
AI safeguards
Agents assist. Pharmacists decide.
- AI features are optional and switched on by each pharmacy.
- The consultation scribe removes the patient’s name and date of birth before anything is sent to the AI, and the pharmacist accepts every suggestion.
- WhatsApp messages that look like they contain personal details never reach the AI.
- The Phone Agent tells every caller it’s an automated assistant. Urgent symptoms get a fixed 999/111 message, not the AI.
Keeping data only as long as needed
Retention
- Phone calls are transcribed, not recorded. Identity details in transcripts are cleared after 30 days.
- Check-in kiosk details are deleted at the end of the day.
- Prescription-tracking details on WhatsApp are wiped after the lookup.
Consent
Patients in control
- WhatsApp marketing messages go only to patients who opted in.
- Replying STOP turns WhatsApp messages off, and START turns them back on.
- Every booking email has a link to cancel or rebook.
Hosting
Hosted in the EU
- The app and its database run in Frankfurt, Germany.
- Backups are encrypted and kept off-site in the EU.

Questions about safety or data protection?

Read our privacy policy and terms of service, or ask the team.

Safe by design, and on the record.

Built to DCB0129

Signed off by a pharmacist

ISO 27001-aligned

The right people, on the record

Agents assist. Pharmacists decide.

Retention

Patients in control

Hosted in the EU

Questions about safety or data protection?

Safe by design, and on the record.

Built to DCB0129

Signed off by a pharmacist

ISO 27001-aligned

The right people, on the record

Agents assist. Pharmacists decide.

Retention

Patients in control

Hosted in the EU

Questions about safety or data protection?