The scenario
Your clinic uses an ambient scribe. Some staff may also be using ChatGPT or Copilot informally.
An inspector, governance lead or manager asks for your AI tool inventory, DPIA status, vendor evidence, human review process and AI incident reporting route.
Some evidence may exist, but it is not yet organised into a documented, board-reviewable position.
Evidence areas that may be tested
- Whether AI tools are procured and assessed against relevant standards, where applicable
- Whether there is a named accountable lead for AI governance
- Whether hazard logs, risk assessments or equivalent review records exist for AI tools
- Whether human oversight, audit and incident reporting are documented
- Whether vendor data protection evidence is available and DPIA status is clear
- Whether staff are trained to use AI as a support tool, not a replacement for clinical judgement
- Whether AI policies match actual practice, not generic wording disconnected from the clinic
What ELSA AI does
- Identifies declared and shadow AI use across the clinic before the inspection
- Produces a board-ready RAG Exposure Map and AI Tool Inventory mapped to Safe and Well-led evidence themes
- Identifies evidence gaps against CQC GP Mythbuster 109 as a governance-standard signal for GP-led clinics
- Structures a 30-day priority action plan so accountable officers know what to address first
ELSA AI provides advisory governance support only. We do not provide CQC approval and do not guarantee any inspection outcome. Final inspection readiness decisions remain with the clinic’s responsible officers.
Does ELSA AI provide CQC approval?
No. ELSA AI does not provide CQC approval, certification or inspection guarantees.
We help clinics prepare a documented AI governance position that can support inspection readiness: AI tool inventory, RAG Exposure Map, DPIA readiness indicators, vendor evidence gaps, staff guidance, human oversight evidence and a 30-day priority action plan.
Final inspection readiness decisions and regulatory engagement remain with the clinic's responsible officers.
Advisory governance support only. Not legal advice, CQC certification, ICO approval or clinical safety case sign-off.