This is your safe space
What does safety mean to us? It means handling sensitive occupational health information with the same care a clinician would — and proving it at every step.
Built for occupational health teams
Ally is designed with OH providers and in-house teams who understand how sensitive this information is. Safe handling of clinical and workforce data isn't a feature we bolted on — it's the assumption everything else is built around.
Your data is yours
We don't use your data to train our AI. The records you create stay yours, and the way Ally writes is shaped by templates you and your team control — not by quietly learning from your patients.
We never train on your data
Your assessments, notes, and reports are not used to train models — for Ally or anyone else. Customisation happens through templates you configure, so the output sounds like your service without exposing your data.
Delete means delete. Forever.
When you delete a record, it's gone — permanently removed, not hidden or archived out of sight. Erasure requests are honoured in full, the way UK GDPR intends.
The AI works to your rules
Ally isn't a black box. You decide what the AI is asked, what it's allowed to say, and the policies it has to follow — so every response reflects your clinical governance, not a generic model's guesswork.
You control the prompts
The instructions behind every summary, report, and prompt are configured by your team — not hidden from you. Adjust what the AI is asked, and how it behaves, to match how your service works.
You shape the responses
Templates and guardrails define the tone, structure, and wording the AI is allowed to produce. A clinician reviews and approves before anything is finalised, so nothing leaves without a human check.
Your knowledge base grounds it
Feed in your own policies, procedures, and clinical guidance, and the AI draws on that knowledge base when it responds — so answers reflect your organisation's standards, not assumptions from the open internet.
“We feel we're in safe hands. The seriousness about data governance and security was obvious from the first conversation.”
Built around the people on both sides of the assessment.
Every account matters. Premium security, always included.
There is no “security tier.” Encryption, access controls, and the same data protections apply to every account, on every plan, from day one.
Ally best practice — for your practice
Great tooling works best alongside good habits. A few simple practices keep your service safe and your records trustworthy.
Empower people with consent
Always let the person in front of you know when Ally is supporting the assessment. Consent prompts and reminders can be switched on in settings so it's never an afterthought.
Always review before you sign off
Ally drafts; you decide. Read every generated note and report and make it your own before it reaches a record. The clinician is always the author.
Share access responsibly
Accounts are personal. Use role-based access and the shared template library rather than passing logins around, so every action stays attributable to a real person.
You say you're compliant. But how do you prove it?
Ally's security program is built to recognised enterprise standards from day one — aligned with the ISO/IEC 27001 control framework, SOC 2 Trust Services Criteria, and UK GDPR. We implement controls now rather than retroactively, with formal certification audits planned as we scale.
- UK GDPR
- Data Protection Act 2018
- ISO/IEC 27001 aligned
- SOC 2 (certification planned)
- AES-256 at rest
- TLS 1.2+ in transit
- UK data residency
- OAuth 2.0 + least-privilege RBAC
What data does Ally store?
Ally stores only transcripts and the documents you generate from them. No audio recordings are ever saved.
- 01
As the assessment happens, Ally listens
Audio is processed in real time to support the conversation — and is never written to disk or stored.
- 02
The transcript is captured
Speech becomes a structured, reviewable transcript. This is the working text behind notes and reports.
- 03
Notes and reports are drafted
Ally stores only the transcript and the documents you generate from it — nothing more. No audio recordings are ever saved.
See Ally in action
Book a demo to see how Ally supports more efficient workflows, clearer insights, and reduced manual workload.