IUVARATM
Compliance & security

Special-category health data, handled to the standard the work demands.

Iuvara processes some of the most sensitive data there is. The compliance stack is built to match, and nothing leaves the region it is held in.

Data residency

Your records stay in the UK and EU. Always.

All processing runs on AWS Bedrock in the eu-west-2 (London) region. Records are held, read, and structured in region, encrypted and access-controlled throughout. Nothing is sent outside the UK or EU, and nothing is used to train third-party models.

The compliance stack
GDPR Article 9

Special-category health data is processed lawfully under Article 9 of the UK GDPR, on the basis that applies to the establishment and defence of legal claims.

Cyber Essentials Plus

Certified to Cyber Essentials and Cyber Essentials Plus, the UK Government-backed scheme, including the hands-on technical audit the Plus tier requires.

NHS DSP Toolkit

Aligned to the NHS Data Security and Protection Toolkit, the standard NHS organisations use to evidence safe handling of patient data.

Penetration tested

Independently penetration tested by CREST-certified security consultants, the recognised UK standard for ethical hacking, to confirm the platform withstands real-world attack before it holds your data.

Independent DPO

An independent Data Protection Officer is engaged. Records stay encrypted and access-controlled at every stage.

ISO/IEC 42001

Working towards the world's first standard for AI management.

ISO/IEC 42001, published in December 2023, is the first international standard for managing artificial intelligence responsibly: how a system is governed, how its risks are controlled, how humans stay accountable for what it produces. It is to AI what ISO 27001 has long been to information security.

Very few organisations hold it. Certification is granted by a UKAS-accredited body against an audited management system, not a questionnaire. Iuvara is working towards certification, aiming to be the first medico-legal AI platform to hold it.

Published in December 2023, ISO/IEC 42001 is certified by a UKAS-accredited body against an audited management system. Iuvara is working towards it, aiming to be the first medico-legal AI platform to hold it.

The pilot

Invitation-only, and tested by the people who set the standards.

Iuvara is in a closed pilot with experienced members of the Medicolegal Committee of the Independent Doctors Federation, the doctors who advise on how expert evidence should be produced and who write reports of exactly this kind.

Access is by invitation only. The platform is shaped by their scrutiny before it is opened more widely.

The Independent Doctors Federation

The IDF is the leading membership body for independent doctors in the United Kingdom, representing consultants and GPs in private practice and a respected voice on standards, ethics, and medicolegal work.

1989
established
1,500+
member doctors across the UK
All specialties
consultants and GPs in private practice

Questions about how your data is handled?

Contact us Invitation only during the pilot