Know every AI system running across your organisation. Reduce clinical risk before it becomes patient harm.
vikela is the AI governance platform for GP federations, PCNs and ICBs. Discover shadow AI, assign accountability, and generate the regulatory evidence — in one system.
Surface every AI tool in clinical use across the organisation, including the ones nobody put on a register.
Every product gets a named Clinical Safety Officer, a Senior Responsible Owner, and a committee that signs it off.
DCB0160, DCB0129, hazard logs and committee packs assemble themselves from the work the CSO is already doing.
Demonstration data · discovery baseline, Aldermoor Health Federation · last reviewed 31 Jul 2026
What a 90-day pilot looks like
Designed to fit around clinical workload. Led by an accredited Clinical Safety Officer with NHS clinical and digital leadership experience.
We reconcile your procurement, DPIA and SSO records with a structured practice survey, and hand you a complete AI register — including anything undeclared.
Hazard logs and clinical safety cases assembled with your clinical team on 2–3 priority products, with a hazard workshop chaired by the CSO.
DCB0160-aligned governance packs for each assessed product, a board-ready assurance report, and a costed plan for the rest of the register.
What we need from you: procurement and DPIA records, an SSO log export from your IT team, and around two hours per week from a digital clinical lead. No clinical system access. No patient data.
Book a scoping callSurface the AI nobody put on the register
vikela reconciles four records the federation already holds — procurement, DPIA, an SSO log export from your IT team, and a structured practice survey — to find the AI in clinical use, including what your CSO was never told about.
No clinical system access. No patient data. The most common audit finding in primary care is the AI nobody admitted to.
across 19 practices
Eight were never declared on a register. Six are on the managed register so far — the assurance posture for all fourteen is below.
Am I safer than last month? Yes — but of the 14 products discovery surfaced, only 6 are yet on the managed register. The gap is the work. Select any card to open the register.
Risk heatmap — PCN by hazard severity
Count of products with open hazards at each severity, per primary care network. Hover a cell for detail.
AI governance maturity
Where the federation sits against the five-stage maturity model.
Stage is set by the lowest pillar — Clinical at 43% holds the federation at Aware. Maturity % is the mean of the four pillars.
The vikela AI Clinical Safety Maturity Model is a proprietary framework developed by TrustPoint Digital Health, informed by the DCB0129/DCB0160 four-pillar structure, NHS England's Digital Maturity Assessment methodology, and the NIST AI Risk Management Framework.
Lifecycle funnel
Where AI is in the assurance pipeline.
Committee workload
Packs due across governance forums.
6 packs · assembling automatically from CSO findings
Clinical Product Register
Aldermoor Health — every clinical IT product in use across the federation, ranked by assurance state. Select a product to open its lifecycle record.
CSO workspace - DCB0160 lifecycle management
Run assessments and hazard workshops, map the patient journey, and author the safety artefacts - all versioned against the system record.
Governance packs
Packs assemble themselves from the work the CSO is already doing. Every section is generated from a live record — no copying into templates, no version confusion. Sent by secure link: view-only, audit-logged.
ResultsFlow Auto-Filing — FCSG pack
VoxScribe AVT — FCSG pack
CodeAssist SNOMED — PCN Board pack
TriView Online Triage — ICB Digital Safety pack
v0.8 · 04 Jul · A. Whitfield (CSO) · 30-day monitoring snapshot refreshed · Superseded
v1.0 · 02 Jul · A. Whitfield (CSO) · CodeAssist remediation condition finalised · Sent
Where AI Enters the Patient Journey
A person-centred general-practice pathway. Each AI touchpoint is plotted where it intervenes and linked to its hazard ID — so the multidisciplinary team can walk the journey and attach hazards before the workshop, not after an incident.
Standards & Guidance
The national framework vikela is built on — and the primary-care-specific guidance every federation should have to hand.
Clinical risk management standards for deploying organisations and manufacturers — the backbone of every lifecycle gate.
The first question every deployment answers: do DCB0129 and DCB0160 apply to this product?
Guidance for stand-alone software and apps — including where an AI triage tool crosses into SaMD.
Learn from Patient Safety Events - the national recording service every vikela event report aligns to, including SEAs.
College guidance on safe adoption of AI tools in primary care, including ambient scribes and online triage.
Champion for patients on medicines and medical device safety — putting patients at the heart of decisions.
The taxonomy behind vikela's risk categorisation — also used in the UK Healthcare AI Safety Registry.
Where vikela event learning is shared — LFPSE-aligned, so the whole system learns, not just one practice.
Consultant CSO cover, safety-case authorship and revalidation reviews for clinical AI — per product or per review cycle, no lock-in.