Transforming
Primary Care
Through Technology

Yes, MedPrompt is integrated with Optum's EMIS Web GP system through secure APIs. We are working hard to support other systems like TPP SystmOne and, more recently, Medicus Health.

Simply book a demo or get in touch with us at info@medgenixtech.co.uk.

Our team provides full technical support through multiple calls during the setup and training process.

MedPrompt is registered with the MHRA as a Class I medical device. It is fully compliant with the DCB0129 standard (UK digital clinical safety and risk management) and is aligned with the NHS Digital Technology Assessment Criteria (DTAC) framework. We also adhere to the NHS Data Security and Protection Toolkit (DSPT) (ODS code D1Z9T). Our clinical safety team is constantly monitoring the latest developments in regulation.

Yes. MedPrompt is registered with the MHRA as a Class I medical device. The regulated functions are the Documents and Scribe modules, which help qualified users in GP practices with clinical correspondence and consultations.

We have partnered with AbedGraham, a leading clinical safety consultancy, to ensure MedPrompt is clinically safe and compliant, including the clinical safety case that supports our Class I medical device registration.

We employ enterprise-grade security including TLS 1.2+, end-to-end encryption for data in transit and at rest, and strict role-based access controls (RBAC). Authentication is secured through multi-factor authentication (MFA) and NHS Care Identity integration. Our servers are hosted in the London Azure Data Centre with automated backup and disaster recovery procedures. We conduct annual penetration testing (with additional testing for major releases) and recently passed a CREST-certified penetration test. We are compliant with Cyber Essentials Plus and have completed a comprehensive Data Protection Impact Assessment. All data processing follows GDPR and NHS Digital standards.

Taking a similar approach to clinical safety, we partnered with Evalian - a data protection consultancy. They provide expert advice to ensure MedPrompt is compliant with GDPR and NHS Digital standards.

Most practices see improvements in document processing speed within the first week of using MedPrompt Documents. MedPrompt Scribe typically fits into consultation workflows over a similar period. Full workflow optimization typically occurs within 2-4 weeks as staff become familiar with the system.

MedPrompt processes data for patients registered with your practice, including children and vulnerable individuals where applicable. This includes patient identifiers (name, date of birth, NHS number), demographic information, health and medical information contained in patient documents and consultation transcripts, and metadata generated during processing. All health data is processed under Article 9(2)(h) UK GDPR as special category data, with appropriate safeguards in place.

We carefully vet all third-party vendors and partners to ensure they meet our strict security and compliance requirements. This includes verifying their certifications (such as ISO 27001, Cyber Essentials), reviewing their data processing agreements, conducting regular security assessments, and ensuring they comply with GDPR and NHS Digital standards. We only work with partners who can demonstrate equivalent levels of data protection and security controls.