Key points
- Jerusalem had 966,200 residents at the end of 2021, double Tel Aviv, including 375,600 Arab residents and a Haredi population of 281,800.1
- Under Israel's data security regulations, a database holding medical information sits at medium security level or higher.2
- It moves to the high level once it holds data on 100,000 people or has more than 100 authorised users.2
- Access records must be kept for at least 24 months, and a severe security incident is reported to the Registrar immediately.2
- wai drafts in Hebrew, Arabic or English, a person at the clinic approves and sends, the doctor signs, and records stay in Israel.
Summary
A Jerusalem clinic can use AI for notes and the front desk in 2026 under the Privacy Protection Law and its 2017 data security regulations, which place medical databases at medium security level or higher. The doctor signs every note, a person at the clinic approves every message and records stay in Israel.
Jerusalem clinics now answer a family in Hebrew, Arabic or English the same day it writes, and doctors finish with every note signed before Shabbat. wai drafts the replies and the notes, a person at the clinic approves or signs each one, and the records stay in Israel under the Privacy Protection Authority's data security rules.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee an Arabic WhatsApp message from Beit Hanina and a Hebrew one from Ramot drafted for the same reception to approve, in fifteen minutes with a clinician who uses wai daily.
| Body or rule | Requirement | What to ask | How wai meets it |
|---|---|---|---|
| Data Security Regulations 2017, First Schedule | Medical databases at medium security level or higher | Which security level applies to the clinic | Role-based least privilege enforced in the database |
| Data Security Regulations 2017, Second Schedule | High level at 100,000 people or more than 100 authorised users | How many patients and users are on file | Access logging for every user |
| Data Security Regulations 2017, Regulation 10 | Access records kept at least 24 months | Can the clinic export the access history | Every message, draft, approval and signature logged and exportable |
| Data Security Regulations 2017, Regulation 11 | Severe incidents reported to the Registrar immediately | Who makes the report | Full event history ready for the report |
| Ministry of Health | Licenses the health professions | Which licensed doctor signs each note | Every note a draft until the doctor signs it |
The private care market in Jerusalem
The Jerusalem Institute for Policy Research put the city's population at 966,200 at the end of 2021, double that of Tel Aviv and 10% of Israel's population.1 Jerusalem has the largest Jewish, Haredi and Arab populations of any Israeli city, with 590,600 Jews and others, 375,600 Arabs and a Haredi population estimated at 281,800.1
In 2021, 11,900 people moved to Jerusalem from elsewhere in Israel and 22,700 moved out, with Beit Shemesh the leading destination.1
The rules a clinic in Jerusalem works under
The Ministry of Health oversees planning, supervision, control and licensing across the health system and licenses the health professions.3 In October 2026 the Ministry reported a court ruling that upheld a five-year licence suspension and found that a physician cannot refuse to provide medical records by invoking the privilege against self-incrimination.3
The Privacy Protection Authority publishes the Protection of Privacy Regulations (Data Security) 5777-2017.2 Their first schedule places any database holding medical information or information about a person's mental condition at medium security level, and the second raises it to high once the database holds data on 100,000 people or has more than 100 authorised users.2
At medium or high level the regulations require an automatic mechanism that records each access attempt, with the user, time, system and outcome, and those records are kept for at least 24 months.2 Medium level also requires routine backups and a yearly review of security incidents, quarterly at high level, and the controller notifies the Registrar immediately after a severe security incident.2
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Jerusalem. Access is limited by role in the database, and every message, draft, approval and signature sits in a log the clinic can export.
The languages Jerusalem patients write in
Hebrew and Arabic both carry a Jerusalem front desk, with 375,600 Arab residents alongside 590,600 Jews and others in 2021.1 wai is built for Arabic-first care and works in any language.45
A patient can answer intake questions by voice in Hebrew, Arabic or any other language, and the doctor reads the answers in English before the visit.5 Each reply is drafted in the language the family wrote in, and a person at the clinic approves it before it is sent.
What a demo shows in Jerusalem
Two WhatsApp messages arrive on Thursday evening. One, in Arabic from a father in Beit Hanina, asks whether his daughter's ear infection can be seen on Sunday. The other, in Hebrew from a mother of six in Ramot, asks to move three children's appointments to Friday morning before Shabbat. wai keeps each in its family's thread, reads the doctor's busy times from Google Calendar, Outlook or Apple Calendar, and drafts both replies with open slots. Reception approves them before closing.
In the consult the scribe drafts the note in the room or on video, the doctor edits and signs it, and the referral letter is drafted from the signed note. Each family gets a wai Profile for letters and results, with permissions it can revoke, and every access to the record is logged.
For health systems, health funds and government in Jerusalem
A hospital, a health fund or a public programme can commission a system built on wai for one defined care pathway, with records hosted in Israel, access logging matched to the high security level, and data, configuration and model rights written into the contract. See wai for organisations.
Where to start
First, work out the clinic's security level by counting patients on file and authorised users against the 100,000 and 100 thresholds.2 Second, confirm access records are kept for 24 months and name who reports a severe incident to the Registrar.
Third, add the AI line to intake in Hebrew and Arabic, using the consent form template. Fourth, count last month's enquiries by language, channel and day of the week, then book a Jerusalem demo and bring that count.
Bring a week of Jerusalem enquiries, Hebrew and Arabic together, and see the drafts your reception would approve.
Frequently asked questions
What security level applies to a Jerusalem clinic's patient database?
Medium at least, because it holds medical information, and high once it holds data on 100,000 people or has more than 100 authorised users.2
How long must access records be kept?
At least 24 months, under regulation 10 of the 2017 data security regulations.2
What happens after a severe security incident?
The database controller notifies the Registrar immediately and reports the measures taken.2
Can patients write in Arabic and Hebrew?
Where are a Jerusalem clinic's records hosted?
In Israel. wai hosts each clinic's records in its own country, under that country's rules.
Who signs a note the scribe drafts?
The treating doctor. Every note stays a draft until the doctor reviews, edits and signs it.
Sources
- 1Jerusalem Institute for Policy Research, 2023Jerusalem Facts and Trends 2023Read 15 October 2026Read source
- 2Privacy Protection Authority, Ministry of Justice, Israel, 2017Protection of Privacy Regulations (Data Security) 5777-2017, unofficial English translationRead 15 October 2026Read source
- 3Ministry of Health, Israel, 2026Ministry of Health, home page and media statementsRead 15 October 2026Read source
- 4wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 5wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
Every Jerusalem family answered in its own language the same day, every note signed before Shabbat.
Fifteen minutes with a clinician who uses wai daily, on your own enquiries and consults. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits