Checkout, free booking and payment for any clinic.Try it freeData is encrypted, access is logged, and nothing clinical sends without a signature.
Data is encrypted in transit and at rest, with keys managed per clinic and audited access to every record.
The product includes encryption, access controls and audit logging. The legal role, contract and required operating controls are agreed with each clinic before production use.
Every message, draft, approval and change is logged. You can always answer who did what, and when.
Nothing clinical sends without a clinician’s signature, and nothing operational sends without your team’s approval.
AES-256 at rest and TLS 1.3 in transit, on a managed key estate.
Role-based, least-privilege access for clinic staff, enforced in the database rather than the application. Our own engineers reach production data through a separate credential, never a clinic’s.
Every message, draft, approval and signature is written to an event log, and your clinic can export it.
Records stay in the United Kingdom. Every function and the database run in London, and we will say so in writing. We do not host in the EU or the United States today.
Every one named, with what it does and the data-processing agreement in place, and thirty days notice before anything changes. Ask us for the current list.
wai does not currently hold a SOC 2 report, ISO 27001 certificate or Cyber Essentials certificate. HIPAA readiness also depends on the applicable role, signed agreements and operating controls. Current evidence and open work are listed in the Trust Centre.
We aim at 99.9%. When something does go wrong, your clinic hears it from us first.
Ask us for the credentials, documents and open gaps relevant to your intended use, each with a status and a date, and we will send them. Tell us what you need.
Further reading