TRUST AND COMPLIANCE
An AI agent that speaks to your patients has to earn its place. This page sets out every credential we hold, what each one means, and why it matters to you. Built and hosted in the UK by Gateway Global Ltd.
Digital Technology Assessment Criteria
The national baseline the NHS uses to assess digital health tools: clinical safety, data protection, security, interoperability and usability.
It answers your ICB's and your IG lead's first question before they ask it, and shortens procurement.
DTAC ready. The completed assessment pack is available to buyers on request.
Clinical risk management standard
The NHS standard for manufacturers of health IT. It requires a maintained clinical safety case, hazard log and a named Clinical Safety Officer.
It is the difference between a chatbot pointed at healthcare and a system engineered for it. A named clinician is accountable for how this product behaves.
Clinical-safety audited under DCB0129. The safety case and hazard log are maintained and shared with buyers.
THE CLINICAL SAFETY OFFICER
The Clinical Safety Officer is a registered clinician trained in clinical risk management. They own the hazard log, review how the agent handles edge cases, and have the authority to block a release. This is a legal role under DCB0129, not a marketing one.
THE ROLE, NOT A JOB TITLE
Our Clinical Safety Officer is named, with their professional registration, in the clinical safety case issued to every healthcare buyer. We identify them in that document rather than on a marketing page, because that is where your IG lead needs to see it.
Request the safety caseData Security and Protection Toolkit
The NHS's annual self-assessment against the National Data Guardian's data security standards.
Most NHS organisations require suppliers who touch patient data to publish a DSPT status. Yours can check ours on the public register.
Completed annually and included in the assurance pack we issue to NHS buyers, alongside our ISO 27001 certificate and Cyber Essentials Plus evidence.
Independently tested security
The UK government-backed security certification. The Plus level means the controls are verified by an independent technical audit, not self-declared.
Your patients' calls run through infrastructure that has been attacked on purpose by professionals, and held.
Certified at the Plus level, renewed annually.
Information security management
The international standard for an information security management system: risk assessment, controls, monitoring and continual improvement, audited by an external certification body.
It is the credential most EU and enterprise procurement teams ask for first, and it means our security is a maintained system rather than a set of good intentions.
Certified, with the certificate and scope statement available to buyers.
AI management system
The first international standard for managing AI systems responsibly: governance, risk, human oversight, transparency and lifecycle control.
Very few voice AI suppliers can speak to this. It is the standard that answers "how do you govern the model", not just "how do you secure the server".
Certified or in final assessment depending on scope. Current documentation is shared under NDA.
Operational controls, independently tested
A report by an independent auditor on how our controls for security, availability and confidentiality actually operated over a period of months, not on a single day.
It is the report your IT or InfoSec reviewer will ask for if they have bought software before, particularly outside the UK.
Available under NDA.
Transparency obligations for AI systems
The EU regulation governing AI. For a voice agent the central duty is transparency: a person must be told they are interacting with an AI system, and providers must document how the system is governed and overseen.
A caller who is misled about who they are speaking to is a compliance problem and a trust problem. We treat disclosure as a design rule.
Assessed. Prime Assist identifies itself as an AI at the start of the call, records that it did so in the audit trail, and always offers a route to a human. We can describe our obligations and our controls in writing.
Choose the region your calls are processed and stored in: a UK region, or an EU region for customers who need data to stay inside the Union. Whichever you choose is written into the contract as a commitment, not left as a configuration default.
Compliant with UK GDPR and EU GDPR, registered with the ICO as a data controller and processor, with a DPIA template and our registration details supplied in your data processing agreement.
No call audio or transcript is used to train third-party models.
Prime Assist is protected by a UK patent portfolio held by Gateway Global Ltd. Prime Assist and GATEWAY GLOBAL LTD are registered UK trademarks. The technology is built here, scaled here and kept here: a UK AI maker, not AI taker.
START WHERE YOU ARE COMFORTABLE
Buying voice AI on a slide deck is how people end up with something that fails on the first awkward caller. So we made the product itself the easiest thing to try, and put the commitment in your hands rather than ours.
Ring the line and talk to Prime Assist the way one of your callers would. Ask it to book you in, then try to catch it out. No form, no email address, no follow-up call from us.
Call +44 20 3747 7785We do not capture your number. Nothing happens afterwards.
Enter your call volume and average job or appointment value. You get the arithmetic on what the unanswered ones are costing you, with the methodology shown so you can challenge it.
Run my numbersEmail only if you want the full report sent over.
Bring the three calls that waste the most of your team’s day. We run them live, in your sector’s language, and tell you honestly which ones we would not take. Five fields to book.
Book a demoNo card, no sales sequence, one human reply.
Most people do all three, in that order, and it costs them about twenty minutes in total. We would rather you tested the product than read our claims about it.
We will walk through the safety case, the audit trail and the data flows, live.