Updated 21 October 2026.
A European supplier with CE-marked software can appear to offer a straightforward answer to questions about clinical AI safety, sovereignty and NHS suitability. The answer is not that simple. A company's headquarters, the conformity-assessment route of its product, the location of its infrastructure and the quality of its clinical outputs are separate characteristics.
The UK government's CE-recognition decision makes this distinction particularly important. The policy concerns qualifying medical devices, not a general preference for European-owned technology. A non-European manufacturer can also have a qualifying CE-marked product, while a European company may offer functions that are not covered by the certificate a buyer has seen.
Start with the task rather than the flag
The first question is what the organisation needs the software to do. Drafting a note, searching evidence, supporting a diagnostic decision and helping a trainee revise are different tasks. Their risks, information requirements and evaluation methods differ.
A product should be compared with alternatives that serve the same intended purpose. Otherwise, a regulated decision-support service may be placed beside a general research assistant as though they provide identical permissions and capabilities. The resulting league table can be visually attractive and clinically unhelpful.
The same principle applies to nationality. A supplier's location may be relevant to commercial and jurisdictional questions, but it cannot establish whether the product handles a particular clinical task appropriately. That needs evidence about the product and the proposed setting.
CE marking and NHS deployment answer different questions
CE conformity assessment can provide meaningful assurance within a product's scope. The route and documentation need to be checked, particularly when a platform contains multiple functions. Recognition in Great Britain does not remove MHRA registration requirements or make every possible use acceptable.
NHS deployment introduces additional questions about security, clinical safety, interoperability, usability and information governance. The Digital Technology Assessment Criteria provide a framework for considering these areas. They are not a reason to ignore conformity assessment, nor are they replaced by it.
An American supplier with the appropriate product position and deployment evidence may be suitable. A European supplier without an adequate fit may not be. The purchasing decision should follow the evidence for the particular service rather than treat continental origin as a proxy for readiness.
Data residence is not the whole data-protection analysis
A server location is important information, but it does not fully describe who can access personal information, which legal entities process it or how support and subcontracting work. The ICO's international-transfer guidance explains that making data accessible to a separate overseas organisation can be relevant, not only physically sending a file abroad.
This means that "hosted in Europe" and "no international-transfer question" are not interchangeable statements. Equally, an international transfer is not automatically unlawful; the applicable requirements and safeguards must be considered. The appropriate review depends on the actual data flows and organisations involved.
Buyers should therefore request an understandable account of processing, access, retention and subprocessors. They should also examine the controls and contractual responsibilities. A broad sovereignty slogan is not a substitute for that information, regardless of whether the supplier is European, British or American.
Sovereign options can be valuable without settling every concern
Tandem's Sovereign Health offering describes an enterprise option using European-owned infrastructure with different model-serving choices. That can be relevant to organisations with particular requirements. It should not be assumed that every Tandem customer uses that configuration or that the announcement guarantees immunity from every foreign legal or operational risk.
The useful procurement question is which requirement the option satisfies. It might concern infrastructure ownership, control over processing arrangements or an organisation's risk policy. Those requirements should be documented clearly enough that suppliers can respond with evidence rather than general positioning.
Different configurations may also have different performance, availability and support implications. A buyer should assess the chosen arrangement, not combine the strongest claims from several configurations into an imaginary product that no customer actually receives.
Clinical localisation must also be demonstrated
A system developed in Europe does not automatically interpret UK guidance correctly. Conversely, a company headquartered elsewhere can invest in a well-localised British product. The relevant questions concern source selection, update processes, terminology and the treatment of local pathways.
An assessment should include the jurisdiction-specific tasks clinicians actually perform. It should examine whether the answer makes its source context clear and whether exceptions are handled appropriately. A generic medical answer can be plausible while still being poorly matched to the local setting.
This article is published by iatroX. Its UK-focused reference approach is relevant to that comparison, but should also be evaluated through actual use and source inspection. Geography does not exempt iatroX from the same need to demonstrate relevance.
Availability and intended use vary between named products
Tandem, OpenEvidence, AMBOSS and UpToDate are not simply geographic substitutes for one another. They have different product families, access arrangements and stated uses. For example, OpenEvidence's published partnership material describes access for verified US clinicians, while AMBOSS and UpToDate Expert AI describe their own clinical information offerings.
Those descriptions should be checked for the user's region and the exact product. A demonstration accessible on a website does not establish organisational permission to enter patient information or use the service for a regulated purpose. The same caution applies to claims that a whole company is unavailable or unsuitable based on one product's restrictions.
The fair comparison is therefore a product-and-use matrix, not a contest between continents. Each option should be assessed against the same relevant requirements, with unknowns left visible rather than converted into favourable or unfavourable scores.
Supporting British innovation need not mean lowering standards
Public organisations can help innovation by making problems clear, evaluation opportunities usable and successful implementation easier to repeat. Those activities can improve the prospects of capable domestic suppliers without assuming that local ownership establishes clinical suitability.
The detailed procurement obligations depend on the purchasing arrangement and should be handled through the relevant professional process. As a practical principle, evidence requirements should be proportionate to the task and applied consistently, rather than rewritten around a preferred company's marketing claims.
The NHS should prefer products that meet its clinical, operational and governance needs. Sometimes that will favour a European service, sometimes a British specialist and sometimes another supplier. CE recognition can expand the set of credible options; it should not replace the work of deciding which option is actually appropriate.
Frequently asked questions
Is CE marking available only to European companies?
No. The conformity-assessment route concerns the product and applicable requirements, not simply the nationality of the manufacturer. A non-European company can supply a CE-marked device.
Does European hosting automatically establish UK GDPR compliance?
No. The assessment also involves data flows, access, processing roles, safeguards and other obligations. Hosting location is relevant but does not answer every data-protection question.
Should NHS organisations automatically favour a UK-based clinical AI supplier?
They should assess the actual product, evidence and purchasing requirements. Supporting domestic innovation and selecting an appropriate clinical service are related policy questions, but local ownership alone does not demonstrate suitability.
Assess UK clinical relevance directly
Explore Ask-iatroX for source-linked clinical reference, and evaluate its fit alongside the regulatory and organisational requirements of your practice.