Trust and working principles

A useful diagnosis must be proportionate, explainable and safe to challenge.

This page describes the intended operating principles. Contractual controls and provider details remain unpublished until documentary evidence and legal review are complete.

01

Scope

Agree the decision question, roles, exclusions and minimum evidence boundary.

02

Control

Confirm permitted data, access, providers, transfer method, retention and deletion before data moves.

03

Review

Keep calculations, caveats, assumptions and alternative explanations visible to accountable people.

04

Close

Agree handover, deletion evidence, unresolved risks and the owner of each next action.

Minimum necessary data

Only operational evidence needed to answer the agreed question should be requested. Patient data, special-category personal data and confidential files are not required for the initial conversation and should not be sent.

Human review and AI use

Deterministic metrics and financial logic should remain documented and reconcilable. AI may assist with approved unstructured material or narrative drafting, but accountable human review remains part of every finding and recommendation.

Client systems and subcontractors

System access, processors, specialist support and subcontractors must be engagement-specific, approved and documented. This page does not imply that any particular provider or control is already in place.

Retention and deletion

Use a documented, purpose-based schedule; review records regularly; delete or anonymise them when the purpose ends. The approved web-enquiry periods are listed on the privacy page.