HexylPatient data, treated like patient data.
Hexyl is built for UK clinics, which means it is built for UK GDPR — with health information treated as the special category data it is.
UK GDPR by design
Lawful basis documented per data field, health concerns handled as Article 9 special category data, and data-processing agreements available for every client.
Encryption everywhere
Data encrypted in transit and at rest. Conversations, transcripts and patient records are protected end to end.
Your AI, not a shared one
Review the current privacy information and the providers involved in your selected channels and connections. Confirm the applicable data-processing arrangements before launch.
Automated retention
Retention policies are enforced automatically — old conversations and records are purged on schedule, not when someone remembers.
Right to erasure
Patient deletion requests are honoured across the platform, with tooling built for it rather than manual database surgery.
Full audit trails
Every booking, sync write and administrative action is logged with who, what and when — including changes made by the AI.
What the AI will and won’t do.
Configure and test safeguards for your workflow. AI can make mistakes; staff retain responsibility for clinical decisions and unresolved requests.
- Use approved information. Check answers against your prices and policies. Treat a booking as confirmed only after a successful diary write; handle uncertain outcomes with staff.
- Test staff handover. Agree who receives requests and what the customer hears if a transfer cannot complete.
- Keep clinical decisions with clinicians. Hexyl is not an emergency service or a diagnostic tool. Agree appropriate urgent-care wording and staff escalation, and test those scenarios.
- It respects consent. Outbound contact honours consent and do-not-call flags at the platform level, not as a policy document.
Compliance documentation, our data-processing agreement and sub-processor list are available on request — contact us.
Questions about compliance?
We’d rather answer them before you sign than after.