Clinical Safety & Compliance
Clinical safety, data protection, and regulatory compliance are central to how we design and build BetterLetter. This page contains an overview of our approach. For full documentation or further information, please contact us at hello@betterletter.ai
❤️ Clinical Safety
Class I Medical Device
Dyad Artificial Intelligence Limited is registered with the MHRA as a medical device manufacturer and the BetterLetter software is certified as a Class I medical device for use within the UK. The software is CE and UKCA marked for sale within the UK.
DCB0129 + DCB0160
We maintain an up-to-date Clinical Risk Management File approved by our Clinical Safety Officer. We also provide DCB0160 templates to practices to help them meet their responsibilities in safely deploying new technologies.
🔒 Data Security & Privacy
Data Security and Protection Toolkit (DSPT)
We maintain the NHS DSPT to the level of standards exceeded, demonstrating our commitment to the National Data Guardian’s 10 data security standards.
Digital Technology Assessment Criteria (DTAC)
BetterLetter meets DTAC requirements across clinical safety, data protection, technical security, interoperability and usability. Supporting documentation is available upon request.
GDPR Compliance & ICO Registration
BetterLetter is fully compliant with the UK Data Protection Act 2018. When processing personal data, we act as a data processor following the instructions of the data controller (i.e., the practice), with a Data Processing Agreement (DPA) and Data Privacy Impact Assessment (DPIA) in place. We can provide a template DPIA for practices to support their internal data protection requirements. Dyad Artificial Intelligence Limited is registered with the ICO (Reference: ZB613404).
🌐 Cyber Security
Cyber Essentials Plus
BetterLetter has been audited and certified to meet the requirements of Cyber Essentials Plus, providing independent assurance that our systems are protected against common cyber threats.
CREST Certified Penetration Tested
BetterLetter undergoes annual penetration testing by a CREST certified body, with no major or significant vulnerabilities identified. Any minor vulnerabilities discovered are remediated immediately.
✅ Assurances
Optum Assured Partner
As part of the EMIS partner program, BetterLetter undergoes witness testing and independent assurance by Optum. Our most recent assurance was in January 2026, and we are listed in the Optum Partner Directory.
ICB Assurances
BetterLetter has been independently reviewed and assured by several ICBs. We are always happy to work with new ICB partners - please contact us at hello@betterletter.ai to find out if we have already been in contact with your ICB.
