Straight answers for your options paper.
Everything a practice manager, GP partner or IG lead needs to appraise us on referrals and A&G, including the things we have not got yet. We would rather you read an honest "in progress" here than discover an overclaim later.
Try it on a real letter, free →What does Hush AI actually do for referrals and A&G?
You give it a few lines of clinical context and it drafts the document, a structured referral letter or a clear, specialty-ready Advice & Guidance question, in seconds. Your clinician reviews and edits it, then uses it. It also drafts discharge/clinic-letter summaries, patient information leaflets, complaint responses and QOF/SNOMED coding suggestions. All under clinician review.
Does Hush submit referrals or A&G requests into e-RS?
No. Hush drafts the content; the clinician reviews it and copies it into the NHS e-Referral Service, EMIS or SystmOne to submit, exactly as they would any letter. Hush drafts; it never submits. That boundary is deliberate: it keeps the clinician the author, and means there is nothing for your IT supplier to integrate or approve.
How does it help with Advice & Guidance specifically?
A&G works best when writing the request isn't a chore. Hush turns the clinical picture into a clear advice question, with the relevant background and the specific ask a specialist needs to respond well, so seeking advice first becomes the easy option rather than defaulting to a referral. When advice comes back, it can draft the patient message, the safety-net or the onward referral from the same context.
Can it follow our local guidelines and pathways, and the BNF?
Yes, and it is where Hush stops being generic AI. Share your local referral guidelines and connect your BNF access, and we set Hush up to draft in line with them, citing the specific guideline it used for the clinician to confirm alongside the draft, so no one hunts for the local threshold. Those reference materials are not patient data, so they add nothing to your DPIA. This is a setup step we do with you during the pilot; it needs your guidelines to exist in Hush before it can cite them.
Does it work with EMIS, SystmOne and e-RS?
It works alongside them. Nothing is installed and there is no integration for IT to approve: draft in Hush, review, then copy into your clinical system or e-RS. For a multi-site group that means zero rollout risk.
Is it an ambient scribe? Does it listen to consultations?
No. Hush does not listen to consultations and does not generate clinical notes from them. It drafts administrative correspondence from context you give it. It is deliberately on the administrative side of the line.
Do you offer dictation, or transcribe consultations?
Not for consultations. Hush deliberately does not scribe consultations or generate clinical notes from audio; that sits in medical-device territory (MHRA / DTAC) that we have intentionally stayed clear of at practice level. For referrals and A&G you type or paste a few lines of context; Hush never listens to a consultation. Separately, Hush does offer private, on-our-hardware transcription for meetings and admin audio (Hush Echo), a distinct tool, not a consultation scribe and not part of the referral/A&G workflow this page describes.
Is it a medical device?
No. Because it drafts administrative documents under clinician review, and does not diagnose, triage or generate clinical records, it sits on the administrative side of the MHRA medical-device boundary. That boundary is deliberate and documented.
Who is the author of the letter, and who is accountable?
The clinician. Every output is a draft to be reviewed, edited and approved by the clinician, who remains the author of the record and clinically accountable, the same as any letter typed by a secretary or copied from a template.
How accurate is it, and what about hallucinations?
It is a drafting assistant, not a source of truth. Like any generative AI it can get things wrong, which is exactly why every output is drafted under clinician review and must be verified before it is acted on. It is never the final authority on anything clinical.
Where is patient data processed and stored?
On hardware we own, processed transiently and then wiped, not stored. Any chat history stays encrypted on the clinician's own device, never on our servers, until deleted. Not UK-hosted on AWS, not UK-region on Azure: hardware we physically own.
Is our data used to train AI models?
Never. What you send is processed then gone; it is never stored on our servers and never used to train any model.
Who are your sub-processors?
There are no third-party AI sub-processors in the chain: no OpenAI, Google or Microsoft. Stripe handles card payments and never sees your prompts; Cloudflare provides edge TLS and DDoS protection and is not an AI sub-processor. No AI service other than our own hardware ever receives your prompts or responses. Our sub-processor list is public.
Are you subject to the US CLOUD Act?
No. We process on hardware we own, structurally outside the reach of the US CLOUD Act and FISA Section 702, unlike US-operated cloud AI, which can be compelled to hand over data regardless of where it is stored.
Are you registered with the ICO?
Yes: registered data controller, registration number ZC126901. A DPA draft is available on request; a signed DPA is executed before any live personal data flows. DPIA drafted.
Do you provide a DPA and DPIA?
Yes. Our UK GDPR pack (Data Processing Agreement draft, DPIA template, data-flow diagram, retention & deletion policy and incident-response plan) is available on request; a signed DPA is executed before any live personal data flows. Article 28 processor terms, Data Protection Act 2018.
Do you have the NHS DSPT?
Our Data Security and Protection Toolkit self-assessment is in progress, not yet published, and we say so openly and dated at /procurement. Pilots run under your organisation's own DPIA, using a pre-filled template we supply that your practice adopts and owns. We will update the status in writing the day it changes.
What about DTAC?
The Digital Technology Assessment Criteria is not required for practice-level purchases, so we have deliberately deferred it. We will pursue it when trust-level deployments justify it, and publish that on our procurement page.
Do you hold Cyber Essentials and cyber insurance?
Both are in progress: Cyber Essentials via IASME, and cyber insurance quotes with UK specialist insurers. Our procurement page states each item's status, dated, and will show the certificate numbers the day they are issued.
Can we get an audit trail for our IG, DSPT or CQC evidence?
Yes. Every request is logged with timestamp and metadata, and your organisation can export the full audit trail in one click (CSV or JSON), metadata only, never content, during and after any pilot. It is your evidence, yours to keep.
Can our IG lead verify your retention claims?
Yes. During a pilot, the database schema is open for inspection so your IG lead can check our "processed, then wiped" claim against the actual tables. We would rather be checked than believed.
What happens to our data if we stop using Hush?
You get a full data export within 24 hours, and there are no conversations or documents on our side, because content was never stored in the first place. Plans are monthly with no lock-in and no exit penalty.
Our teams sometimes end up discussing work on WhatsApp. Can Hush help?
It is one of the most common IG headaches in multi-site general practice, and it is why we built HushUp, our private messenger: end-to-end encrypted with post-quantum encryption, with group chats, voice and video calls and disappearing messages, designed so nobody but the participants can read a message, including us. It is in public beta today. If cross-site messaging is on your roadmap, ask us about early access; your IG lead would assess it like any messaging tool, and we will support that with the same written openness as everything else on this page.
How much does it cost?
Published plans run from £39/month (individual) to Enterprise starting from £1,500/month (large organisation, with a full DPA and compliance pack), priced by team size. For a large multi-site group, PCN / federation / multi-site pricing is bespoke: tell us your shape and we will quote it. Every plan starts with a free two-week pilot, no card.
Is there a contract or lock-in?
No lock-in. Plans are monthly, cancel anytime, with no penalty and full data export within 24 hours. We would rather you leave happy than stay reluctant.
How do we run a pilot?
Request in writing and your workspace is provisioned instantly: no card, no calls, up to five logins, under your own DPIA. Your clinicians use Hush on real referrals and A&G for two weeks against success criteria we agree upfront. On day 12 you receive a written usage report built from your own audit-log export: documents drafted, active users, hours saved. Then you decide.
Do you have NHS case studies or reference sites?
We will be straight with you: we are early, and you would be among our first NHS practices. So instead of handing you someone else's numbers, we generate your evidence: the free pilot produces a report from your own audit log that is yours to keep and quote, whether or not you continue. The company itself is fully verifiable today at Companies House (17278687) and the ICO (ZC126901).
Who is behind Hush AI?
Hush is built by its founder, Dr W.J Carter, a doctor who works in the NHS, and improved every day. The company is HUSH AI LIMITED, registered in England & Wales no. 17278687. No VC, no board: a small, stable, reachable team. When you email, we answer.
Do you offer an SLA / what is your uptime?
We do not yet sell an uptime SLA, because we will not evidence one we cannot back with public monitoring history. Instead you get honesty, monthly terms, no lock-in and full data export within 24 hours. We will offer an SLA when we can stand behind it.
What support do we get?
A small, reachable team and dedicated written onboarding; priority support on paid plans. Because it is the founder answering, you are not routed through a call centre.
Can you help with our options paper, or answer partner and IG questions directly?
Yes, that is exactly what we are here for. Email [email protected] and we will answer any question your partners or IG lead put to us, in writing. See also Referrals & A&G and our dated procurement & due-diligence register.
Still have a question?
Ask our on-site assistant, or email us; the founder answers. Every commitment we make is in writing, dated, on our procurement page.
Request your free 2-week pilot, no card →Or email [email protected] · see /procurement
Hush AI is a drafting and summarisation assistant. It is not a source of medical advice. Always verify AI-generated outputs before acting on them. Not a medical device.