Where our assurance stands today.
NHS and private healthcare organisations need to know who they are working with and what has, and has not, been signed off. This page sets that out plainly. We will share the underlying documents with organisations considering a pilot.
AegisRX is offered through early-access pilots that start on synthetic data. Use with live patient data must be within an agreed, governed pilot.
Clinical safety, data protection and security.
“In progress” means work exists but has not been signed off. Nothing on this page is an approval, certification or regulatory determination.
| Area | Status | Where it stands |
|---|---|---|
| Clinical risk management (DCB0129) | In progress | A clinical hazard log and clinical safety case report are maintained and awaiting Clinical Safety Officer sign-off. |
| Deployment safety pack (DCB0160) | In progress | A pack to support each deploying organisation's own clinical risk assessment has been drafted for pilots. |
| Data protection impact assessment | In progress | A DPIA has been drafted and is awaiting sign-off. Each pilot also needs the deploying organisation's own assessment. |
| Data Security and Protection Toolkit | In progress | Evidence has been mapped to the toolkit. The assessment has not yet been submitted. |
| Digital Technology Assessment Criteria (DTAC) | In progress | A self-assessment is in progress. Outstanding items depend on the sign-offs above. |
| Medical device regulation (MHRA) | In progress | A working paper on whether the software is a medical device has been drafted. No determination has been made. |
| Internal security review | Done | An internal, code-level security review covering authentication, access control between organisations, injection and encryption was completed in June 2026. |
| Independent penetration test | Not started | An independent external penetration test has not yet been commissioned. |
Safeguards built into every review.
Pharmacist sign-off
A named pharmacist reviews, edits and signs every released output. The prescriber remains responsible for any change to a patient's medicines.
Deterministic safety checks
Safety rules run independently of the AI, so a model output cannot switch them off.
Protecting health data
Identifiable and clinical fields are encrypted at rest, information is pseudonymised before AI processing, and each organisation's data is kept separate.
Audit trail
Sources, decisions, actions and sign-offs are recorded so a review can be traced afterwards.
Company details.
Medicines Health Check and AegisRX are trading names of Virtual Pharmacist Ltd.
- Company
- Virtual Pharmacist Ltd
- Company number
- 13258094
- Registered office
- Queen Street Chambers, 68 Queen Street, Sheffield, South Yorkshire, England, S1 1WR
Need the documents for your own assessment?
Tell us about your organisation and we will share the hazard log, DPIA and deployment pack relevant to a pilot.