Skip to content
AI triageGo livePlatformSafetyFAQ
Sign inTry the demo
Join Saha
AI triage Go live Platform Safety FAQ
Sign in for pharmacy teams
Join Saha

Trust

Regulatory status, in plain English.

What Saha Care Ltd provides, what the organisations using Saha are responsible for, and how the platform's AI and data are governed.

On this page

  1. 01What Saha is
  2. 02Who is responsible for what
  3. 03Saha's software and medical device regulation
  4. 04How Saha's AI is governed
  5. 05Register checks before go-live
  6. 06Data protection and security
  7. 07Clinical safety
  8. 08The regulators
  9. 09Raising a concern

01What Saha is

Saha is an online clinic platform. Pharmacies, optometry practices and online clinics use it to offer clinical services online: a branded website, AI-supported triage and consultations, payments and governance tools.

Saha Care Ltd provides the platform. It is not the pharmacy, practice or clinic that cares for the patients who use it. Medicines are dispensed by GPhC-registered pharmacies, and care is provided by the registered professionals using Saha.

02Who is responsible for what

Saha Care Ltd builds, hosts and runs the platform; Manufactures the triage software (MHRA Class I registered); writes and maintains service content for each organisation's sign-off; checks people and premises against the public registers; and keeps the platform's SOPs, hazard log and audits current.

The organisation using Saha is the provider of care. Its superintendent or clinical lead accepts each version of a service before it goes live, its professionals make every clinical decision, it dispenses, supplies or treats, and it sets its own prices. It holds its own registrations with its own regulators.

Registered professionals — pharmacists, prescribers, optometrists and other clinicians — review what the platform prepares and decide. No prescription is issued, approved or changed without one.

03Saha's software and medical device regulation

Saha's clinical triage and support system is registered with the MHRA as a Class I medical device (Ref. 38301). Registration is not MHRA approval or endorsement.

Its intended purpose is decision support for registered professionals. It does not diagnose, prescribe or decide a patient's eligibility or urgency.

04How Saha's AI is governed

AI on Saha prepares and coordinates; a professional decides. It gathers a patient's answers, flags anything that needs attention and prepares a summary that is clearly marked as decision support. Saha's AI never:

  • Diagnose, prescribe, or decide eligibility or urgency
  • Queue an emergency instead of directing it to 999 or NHS 111
  • Advertise prescription-only medicines to the public
  • Ask for card details, passwords or NHS login details in chat
  • Use identifiable patient data to train AI models
  • Replace your system of record without an assured integration

Every AI step is logged, so a professional can see what the platform prepared and why.

05Register checks before go-live

Before an organisation goes live, and for the people who work in it, Saha checks:

  • Your premises — GPhC premises register
  • The company behind it — Companies House
  • Your superintendent — GPhC register
  • Every prescriber and clinician — GPhC, GMC, GOC or NMC
  • Right to work — GOV.UK share-code service
  • Identity — Stripe Identity, where needed
  • DBS certificate — Reviewed by a person
  • Indemnity cover — Reviewed by a person

A check confirms a registration number. It does not, on its own, confirm who is using it.

06Data protection and security

ICO registered (ZC113895).NHS DSPT 2025–26 standards met.Cyber Essentials certified.Identifiable patient data is not used to train AI models, and card details are never typed into chat.

How Saha handles personal data is set out in the platform privacy notice.

07Clinical safety

Saha has a named Clinical Safety Officer and runs a clinical risk management process aligned with the NHS standards DCB0129 and DCB0160, with a maintained hazard log. The formal, signed-off compliance assessment will be published here when it is complete.

08The regulators

Depending on what an organisation does, these are the bodies that regulate it, its people and Saha:

  • General Pharmaceutical Council (GPhC) — Registers pharmacies, pharmacists and pharmacy technicians.
  • Care Quality Commission (CQC) — Registers and inspects providers of regulated health care in England.
  • General Optical Council (GOC) — Registers optometrists and dispensing opticians.
  • Medicines and Healthcare products Regulatory Agency (MHRA) — Regulates medicines and medical devices, including software.
  • Information Commissioner's Office (ICO) — Regulates how personal data is used.

09Raising a concern

If you have a concern about the platform, email support@saha.co.uk or contact us. A concern about the care you received should go to the pharmacy, practice or clinic that provided it, and you can also raise it with its regulator.

Saha

The online clinic platform for UK community care. Personal care. Delivered.

Platform

  • AI triage
  • Modules
  • Agents
  • Storefront

Who it's for

  • Independent pharmacies
  • Pharmacy groups
  • Online clinics
  • Optometry

Trust

  • Regulatory status
  • How Saha uses AI
  • Privacy
  • Terms

Company

  • Partners
  • Help centre
  • Contact

Regulation, Certification & Partnerships

  • Cyber Essentials CertifiedCertified
  • NHS Data Security and Protection Toolkit — standards met (2025–26) for Saha Care
    Standards met
  • ICO — Information Commissioner's Office, Data Protection RegistrationRegistered
  • MHRA — Medicines and Healthcare products Regulatory Agency, Class I medical device registeredRegistered
  • UK Research and InnovationFunding partner
  • DiCE — Digital Clinical Excellence network memberNetwork member

© 2026 Saha Care Ltd