Public sector

Buying from us

Every credential we hold, every one we do not, and the route you can buy through today.

wai is a clinical operating system built inside a working private clinic in London and used by that clinic every day. We are the manufacturer of it under DCB0129 and the deploying organisation under DCB0160 at the same time, which is why the safety documentation below exists and is not a slide.

Clinical safety

Hazard logHeld

Version 0.1, dated 6 September 2026. 71 hazards across 156 agent actions, each scored against the criteria in our clinical risk management plan.

Clinical safety caseHeld

A structured argument under DCB0129 3.4.1 and DCB0160 3.4.1, with the risk management plan that sets the scoring.

Agent actions inventoryHeld

Every place in the system where a model acts or proposes, read out of the source. 156 actions, of which 33 reach a patient or the record with nobody accepting them.

Clinical Safety OfficerIn progress

Not appointed, expected October 2026. Until one is, every score in the hazard log is a proposal rather than an approved risk assessment.

Assurance and certification

Digital Technology Assessment CriteriaIn progress

Not submitted, expected January 2027. Its clinical safety section asks for a Clinical Safety Officer, so it follows that appointment rather than running beside it.

Data Security and Protection ToolkitIn progress

Not submitted, expected November 2026. The self assessment built on the ten National Data Guardian data security standards, now aligned to the NCSC Cyber Assessment Framework.

Cyber Essentials and Cyber Essentials PlusIn progress

Not held, expected December 2026. Mandatory across every G-Cloud lot and Plus for the cloud lots.

ISO 27001In progress

Not held, expected June 2027. Started rather than claimed, because underway by the deadline is accepted and a certificate we do not have is not.

Ambient voice technology registryIn progress

Not listed, expected December 2026. NHS England opened a self certified supplier registry in January 2026 and applications remain open. It asks for the Clinical Safety Officer, the assessment criteria and a device position first.

MHRA device positionIn progress

No written opinion held, expected November 2026. Guidance of 29 July 2026 exempts transcription, summarising, drafting correspondence and suggesting codes for a clinician to review. Ours does more than that list, so we are asking rather than asserting.

How you can buy today

Central Digital PlatformIn progress

Registration in hand, expected September 2026. Nothing public can be bid without the identifier, and the registration is free and takes an afternoon.

G-Cloud 15In progress

Not on it, application ready for February 2027. Awarded 6 August 2026 and running as an open framework under the Procurement Act 2023, so it reopens rather than closing.

Direct tenderHeld

We read Find a Tender, Contracts Finder and the Central Digital Platform notices daily. Many integrated care board and trust contracts sit below the threshold that needs a framework, and that is the route open to us today.

Subcontract to a framework supplierHeld

The Healthcare AI Solutions framework closed to bids in June 2026 and we did not bid. The route this year is as a subcontractor to a supplier who wins a lot, bringing the clinical safety documentation they will need and not have.

Social value and accessibility

Social value

Procurement policy note 002 sets a minimum weighting of 10% of the total score on social value. Our statement names what we already do and what we do not, and it is dated. Read the statement.

Accessibility

A statement to the shape the public sector accessibility regulations set, measured against WCAG 2.2 AA, naming the barriers we know about and the independent audit we have not yet had. Read the statement.

Carbon reduction plan

Procurement policy note 06/21 requires one above £5m a year. No contract of ours is near that, so the plan is written when a bid needs it rather than published to look prepared.

Reference site

The clinic that built it runs on it. Every clinician, every round, every letter and every payment, which makes the reference a working site rather than a pilot that ended.

Everything else

Insurance, registration, the data flow, the sub processors, a draft data processing agreement and the security statement sit in one place, each with a status and a date, and none of it behind a form. The Trust Centre.

Ask us for the evidence

The hazard log, the safety case and the agent actions inventory go to a named clinical safety or information governance team, as they stand. If it is a fit, you hear from us within 24 hours.

By submitting, your information will be processed in accordance with our Privacy Policy.