Trust, Safety & Compliance

GP Widget is a cloud-hosted software service designed to support administrative, reception, and clinical teams by providing just-in-time access to practice-approved information. The platform does not generate clinical decisions, recommendations, or diagnoses and does not replace professional judgement.

The system is built entirely on Amazon Web Services (AWS) infrastructure, deployed in the UK region (eu-west-2, London). All data remains within the UK. The platform uses infrastructure-as-code for fully auditable, version-controlled deployments, with authentication managed through AWS Cognito and data stored in AWS DynamoDB. No third-party processors are used for core platform operations.

AI features are powered by Amazon Bedrock using Amazon Nova models. All AI processing occurs within AWS infrastructure with no data shared externally. Amazon Bedrock is HIPAA-eligible and GDPR-compliant, with prompts and responses encrypted and never used to train foundation models.