Constrained access
Task-specific tools, validated requests and practice boundaries.
AITrust · How our AI is governed
Source checks and controlled workflows, each with a clear boundary.
Join the waiting listEach assistant has a defined task, limited tools and validated inputs. A document or transcript supplies information; it cannot change the rules.
Confirm the user, practice and task; use only that task’s tools.
Turn language into structured content, such as a draft note.
Check format, permitted action and rules; check extractions against source.
Unsupported or low-confidence items go to review. Confidence is not correctness.
The clinician accepts, corrects or rejects. Controlled software applies the decision and records it.
A transcript has a dose but no clear medicine name; a model may guess one. Echo checks the name against the quoted passage; if the source does not support it, the item is held for review with a safety note. This is a source check, not proof of prescribing safety.
Model output passes a validation gate that accepts only defined action types. No practice setting can make clinical alerts or high-impact actions automatic. Permitted operational automation uses the same checks and a deterministic executor.
Corrections keep the original beside the new version. Decisions, model and prompt versions, tool activity and resource use are recorded, so investigation rests on records, not the AI’s explanation.
Task-specific tools, validated requests and practice boundaries.
External text is untrusted data. Detecting suspicious instructions aids monitoring; it is not the defence.
Limits on steps, time, tokens and cost.
Our policies require evaluation of factual errors, invented or missing information, performance across groups, hostile inputs and model changes. A policy is not a result: deployment needs completed results, clinical acceptance and operating evidence.
Context and rules in the patient journey.
Explore AI-nativeConsent, review and accountability.
Read the clinical approachExpectations for the site, previews and AI features.
Read the usage policyQuestions
No. Model output passes a validation gate that accepts only defined action types, and a person accepts, corrects or rejects it. Controlled software applies the decision and records it.
Echo checks the item against the quoted source. If the source does not support it, the item is held for review with a safety note.
Registering interest is not a commitment to purchase.
Join the waiting list