AITrust · How our AI is governed

Reasoning with context. Action with safeguards.

Source checks and controlled workflows, each with a clear boundary.

Join the waiting list

Context comes first.

Each assistant has a defined task, limited tools and validated inputs. A document or transcript supplies information; it cannot change the rules.

Five steps to a reviewed result.

  1. 01 · Establish context

    Confirm the user, practice and task; use only that task’s tools.

  2. 02 · Prepare a proposal

    Turn language into structured content, such as a draft note.

  3. 03 · Check the proposal

    Check format, permitted action and rules; check extractions against source.

  4. 04 · Make uncertainty visible

    Unsupported or low-confidence items go to review. Confidence is not correctness.

  5. 05 · Review and record

    The clinician accepts, corrects or rejects. Controlled software applies the decision and records it.

Example: an unclear medicine name.

A transcript has a dose but no clear medicine name; a model may guess one. Echo checks the name against the quoted passage; if the source does not support it, the item is held for review with a safety note. This is a source check, not proof of prescribing safety.

The model proposes. Software carries it out.

Model output passes a validation gate that accepts only defined action types. No practice setting can make clinical alerts or high-impact actions automatic. Permitted operational automation uses the same checks and a deterministic executor.

Review has a record.

Corrections keep the original beside the new version. Decisions, model and prompt versions, tool activity and resource use are recorded, so investigation rests on records, not the AI’s explanation.

Protection is layered.

Constrained access

Task-specific tools, validated requests and practice boundaries.

Content boundaries

External text is untrusted data. Detecting suspicious instructions aids monitoring; it is not the defence.

Bounded operation

Limits on steps, time, tokens and cost.

Evaluation covers the workflow.

Our policies require evaluation of factual errors, invented or missing information, performance across groups, hostile inputs and model changes. A policy is not a result: deployment needs completed results, clinical acceptance and operating evidence.

What has, and has not, been verified.

  • Matching a transcript is not proving a clinical claim true.
  • A citation lets you inspect a source; it does not verify a recommendation.
  • Clinical claim verification remains a separate evaluation project.
  • Review, testing and safeguards reduce risk; they do not eliminate errors or confer regulatory approval.
  • Hosting, model-provider data use and retention are confirmed per deployment.

Related reading.

Questions

Common questions.

Can the AI in Echo One act on its own?

No. Model output passes a validation gate that accepts only defined action types, and a person accepts, corrects or rejects it. Controlled software applies the decision and records it.

What happens when the AI is unsure, for example about a medicine name?

Echo checks the item against the quoted source. If the source does not support it, the item is held for review with a safety note.

Tell us what better care looks like for your team.

Registering interest is not a commitment to purchase.

Join the waiting list