Key points
- Stockholm city had 999,236 residents at the end of 2025, and 35.3% of them had a foreign background.1
- Every day 14,000 people visit one of the 250 vårdcentraler in Region Stockholm, which runs its own care and also contracts private providers.23
- Patientdatalagen requires a journal entry to be kept for at least ten years and every electronic access to be logged and checked systematically.5
- A new care business must notify IVO's vårdgivarregister at least one month before it opens.6
- wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.
Summary
A Stockholm clinic can use AI for notes and patient messages in 2026 when every access to patient data is logged and checked as Patientdatalagen requires, records are kept for at least ten years and the clinic is registered with IVO. Where AI processes personal data, IMY applies the GDPR alongside the EU AI Act.
Stockholm clinics now answer patient messages within the hour and can show any patient, on request, exactly who opened their record. Swedish law is specific about both, through Patientdatalagen and IVO's register. Both duties are set out here, with what a clinic can show its patients.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a late message to a Stockholm clinic become an approved reply, a booking with a deposit in kronor and a signed note with its access log, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| IVO, vårdgivarregistret | Notify at least one month before opening, and report changes within a month | Does the clinic's entry match its current services and premises | wai is set up with the clinic after signing |
| Patientdatalagen, chapter 3, section 17 | Journal entries kept at least ten years after the last entry | How retention and export work at exit | Every message, draft and signature logged and exportable |
| Patientdatalagen, chapter 4, sections 3 and 5 | Every electronic access documented, checked systematically and reported to the patient on request | Can the clinic export the access log for one patient | Every access to a record logged, with the log exportable |
| IMY, GDPR and AI Act | Data protection rules apply alongside the AI Act when AI processes personal data | Where data is hosted and whether it trains any model | Records hosted in the clinic's own country, and patient data never used to train models |
The private care market in Stockholm
Region Stockholm runs care in its own clinics and also holds agreements with private providers, all of which patients find through 1177.3 1177 is run jointly by Sweden's regions, with Inera developing the services and each region choosing which ones it offers.4 Every day 14,000 people visit one of the county's 250 vårdcentraler.2
Stockholm city had 999,236 residents at the end of 2025, and Norra innerstaden alone had 155,616.1 The city's population grew by 3,662 in 2025, with births exceeding deaths by 5,356.1
The rules a Stockholm clinic works under
Inspektionen för vård och omsorg, IVO, supervises care under the Patient Safety Act. A new care business must notify IVO's vårdgivarregister at least one month before it starts, report a substantial change or move within a month, and since 1 July 2023 IVO can order a provider that fails to notify to do so, under penalty of a fine.6
Patientdatalagen sets the record rules. A journal entry is kept for at least ten years after the last entry, under chapter 3, section 17.5 Under chapter 4, section 3, a care provider must document every electronic access to patient data so it can be checked, and must run systematic and recurring checks for unauthorised access. Under section 5 of that chapter a patient may ask which access to their data has taken place.5
Integritetsskyddsmyndigheten, IMY, supervises data protection. Its guidance for care providers says that where personal data is processed to develop or use AI, the AI Act may apply, and the GDPR then applies alongside it.7
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Stockholm. Every access to a record is audited and every message, draft and approval is logged, so the clinic can answer a patient's request under chapter 4, section 5.9
The languages Stockholm patients write in
In 2025, 352,421 people in Stockholm city had a foreign background, 35.3% of the population, meaning they were born abroad or born in Sweden to two parents born abroad.1 About 4,200 people born in Ukraine moved to the city in 2024 alone, a little over one in four immigrants that year.1
wai works in any language, and a person at the clinic approves every draft before it is sent.8 More on that step is in why a person approves every patient message.
What a demo shows in Stockholm
The demo opens on a message sent through the clinic's website at 22.05 by a patient in Vasastan asking for a sports medicine appointment before a ski trip in February. wai reads the doctor's busy times from Google Calendar, Outlook or Apple Calendar and drafts a reply in the patient's language with two open afternoons. The coordinator approves it at 7.30.
The booking link takes a deposit in kronor through the clinic's own Stripe account, with the clinic as merchant of record, and sends an intake questionnaire. After the visit the doctor edits and signs the drafted note. When the patient later asks who has opened the record, the clinic exports the log in minutes.
For regions, insurers and care groups in Stockholm
Care groups and insurers in the Stockholm region can have a system of their own built on wai, under their own brand, with data rights and exit terms agreed in the contract. Each build begins with one pathway and the measures that decide it. The organisations page explains the steps.
Where to start
First, confirm the clinic's entry in IVO's vårdgivarregister and report any substantial change within a month.6 Second, ask show its access log and how the clinic runs systematic checks on it.5
Third, write ten-year retention and full export into the contract.5 Fourth, record whether the AI Act applies to each AI use, alongside the GDPR assessment.7 Fifth, count last month's messages by hour so the demo runs on the clinic's real week, and see the guide to after-hours enquiries.
Bring last month's messages and one access-log request, and we show both running on wai.
Frequently asked questions
Does a new private clinic in Stockholm need to register with IVO?
Yes. A business covered by IVO's supervision notifies the vårdgivarregister at least one month before it starts.6
How long must a Stockholm clinic keep patient records?
At least ten years after the last entry in the journal, under chapter 3, section 17 of Patientdatalagen.5
Must the clinic log who opens a patient's record?
Yes. Every electronic access must be documented and checked systematically, and the patient can ask which access took place.5
Does the EU AI Act apply to clinic AI in Sweden?
It may, where AI processes personal data, and IMY notes that the GDPR then applies alongside it.7
Where are the clinic's records hosted?
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.
Can patients write in their own language?
Yes. wai works in any language, and every draft waits for approval by someone at the clinic.8
Sources
- 1Stockholms stad, 2026Befolkningsöversikt 2025Read 15 October 2026Read source
- 2Region Stockholm, 2026Hälsa och sjukvård, nyckeltalRead 15 October 2026Read source
- 3Region Stockholm, 2026Vårdcentraler i Region Stockholms regiRead 15 October 2026Read source
- 4Inera, 20261177Read 15 October 2026Read source
- 5Sveriges riksdagPatientdatalag (2008:355)Read 15 October 2026Read source
- 6Inspektionen för vård och omsorg (IVO), 2026VårdgivarregistretRead 15 October 2026Read source
- 7Integritetsskyddsmyndigheten (IMY), 2026Frågor och svar om personuppgifter i hälso- och sjukvården, för vårdgivareRead 15 October 2026Read source
- 8wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 9wai, 2026Security at waiRead 15 October 2026Read source
Every Stockholm message answered within the hour, every access on record.
Fifteen minutes with a clinician who uses wai daily, on your own messages and calendar. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits