skip to main content
iatroX JournalUK Primary Care

"NHS-Approved AI": What Inclusion on a Supplier Registry Actually Means

Featured image for "NHS-Approved AI": What Inclusion on a Supplier Registry Actually Means

An AI supplier appearing on an NHS England registry has not thereby received an NHS endorsement of its product. As checked on 10 October 2026, NHS England describes its ambient voice technology registry as self-certified, says it is not a commercial framework, and expressly disclaims supplier endorsement. The distinction matters before a reassuring label becomes a purchasing decision. NHS England's registry explanation is the appropriate starting point, not a vendor's interpretation of its listing.

What the ambient-scribing registry is for

A registry can make initial market assessment easier. It gives an organisation a defined place to identify suppliers and assemble information, rather than beginning with unrelated demonstrations, advertisements and recommendations. That is useful procurement infrastructure. It is not the same task as evaluating whether a particular configuration works safely in a particular clinic.

The self-certified supplier listing, checked on 10 October 2026, should therefore be read at the level of the named supplier and product. A claim about one listed product should not silently expand to every feature sold by its parent company, an integration subsequently enabled, or a different service operating overseas.

Self-certification also needs its ordinary meaning preserved. The supplier makes declarations against specified requirements. It does not follow that NHS England has independently repeated every technical test, examined every output or established improved patient outcomes. NHS England describes preliminary completion checks, with purchasing bodies retaining their own governance processes.

Five assurances that should not be collapsed into one

For a buying team, the following claims-decoding table is more useful than a single approved/not-approved box. It is an editorial assessment aid, not a new national certification scheme.

Claim encounteredWhat to establishWhat it cannot establish on its own
Listed on an NHS registryExact supplier, product, entry and scopeNHS endorsement or local permission to deploy
A regulatory status is advertisedIntended purpose, functions, territory and supporting documentationSuitability for every task under that brand
Clinical safety documentation is availableVersion, assumptions, hazards and residual risksThat local risks have already been assessed
A privacy or security assurance is providedRelevant service, data flows and contractual scopeThat every proposed secondary use is justified
The product has been evaluatedPopulation, comparator, configuration and measured outcomesGeneral effectiveness across all clinical settings

These distinctions are especially important when an attractive claim answers a different question from the one being asked. A buyer asking whether an outpatient letter can be filed safely needs more than evidence that a supplier has completed a questionnaire.

Manufacturer evidence is the beginning of a local assessment

NHS clinical-risk standards separate responsibilities. As described in the official pages checked on 10 October 2026, DCB0129 concerns manufacture, while DCB0160 concerns deployment and use. The latter includes maintenance and decommissioning, not merely the moment a contract is signed.

Consider a fictional outpatient service. A supplier's safety documentation assumes that the treating clinician reviews the complete draft before filing. Locally, an integration initially places drafts in a shared queue, where a different clinician may encounter them after the clinic has finished. The supplier's assumption has not necessarily become false everywhere. It has become a specific local question: can the reviewing professional establish what happened in the encounter, and is that review responsibility allocated appropriately?

A practical handover would identify the assumption, the local owner, the control and the test. For this example, the service could test whether an unreviewed draft can enter the final record, whether another user can distinguish it from an approved note, and what happens when the original clinician is absent. This is a proposed test, not an account of a documented incident.

Regulatory status needs a function and a geography

The MHRA's clarification published on 29 July 2026 concerns how existing medical-device law applies to ambient voice technologies in Great Britain. It distinguishes documentation-only purposes from diagnostic, treatment-support and certain automated-action functions. It does not turn a supplier-registry entry into a medical-device approval.

A procurement conversation should consequently use verbs. Does the feature transcribe, summarise, suggest a code, recommend an investigation, prepare an order or place an order without review? Those descriptions are more informative than saying that a company sells a clinical assistant.

The same discipline applies to territory. An England-focused supplier registry, Great Britain device guidance and a supplier's international product announcement answer different questions. A purchasing team should record the precise authority or assurance it is relying on rather than treating an NHS logo as a substitute for that analysis.

What a defensible purchasing meeting would ask

For the proposed deployment, ask the supplier to demonstrate an ordinary encounter, an incomplete encounter and a failure. In the ordinary case, inspect how the draft reaches the reviewer. In the incomplete case, inspect how unanswered questions remain visible. In the failure case, establish whether staff know that the tool has stopped or changed behaviour.

Then examine what the organisation must provide. Does effective review require protected time, additional training or access to information not available in the interface? Can a patient decline the tool without the consultation collapsing? Can the service continue if the supplier is unavailable? These are proposed local acceptance questions, not claims that every registry supplier fails them.

The NHS applicability guidance for DCB0129 and DCB0160, checked on 10 October 2026, provides a route for assessing the standards in context. An organisation should use the relevant professional, procurement and information-governance expertise rather than treating this article as legal approval.

Evidence should remain inspectable after purchase

A useful assurance record would contain the product version, permitted functions, relevant supplier documents, local assumptions, named owners and conditions for reassessment. It should be possible to understand why the organisation accepted a risk and what would cause that decision to change.

For example, adding automated sending to a previously draft-only workflow should prompt an explicit review of the new consequence. So should a material change in the patient population or in who checks the output. This is a proposed governance rule: re-examine the decision when its important assumptions change.

The distinction also applies to clinical-reference products. As described by iatroX for this October 2026 series, Ask-iatroX supports source-linked knowledge checking; it is not an assurance certificate for another supplier or for an NHS deployment. Reading the underlying guidance through Ask-iatroX may support an individual's learning, but purchasing authority and clinical safety ownership remain separate organisational tasks.

A registry can help a team find a supplier. It cannot answer the final question on the team's behalf: is this exact use sufficiently understood, controlled and worthwhile in this service?

Frequently asked questions

Does inclusion on the NHS England AVT Supplier Registry mean NHS endorsement?

No. NHS England's registry information, checked on 10 October 2026, explicitly distinguishes self-certified listing from endorsement and from a commercial procurement framework.

Does every listed supplier have the same medical-device status?

A registry listing should not be used to infer a common regulatory status. Establish the intended purpose, functions, territory and documentation for the exact product being considered.

Can a GP practice rely entirely on a supplier's safety case?

Supplier documentation can inform the assessment, but it does not resolve risks created by the practice's own configuration, staff responsibilities and workflows. Applicable deployment obligations need local consideration.

Explore source-linked clinical questions with Ask-iatroX →

More from the Journal