AI and compliance
Last updated 23 September 2026
ClinicOS uses AI to take routine work off care teams. This page explains what the AI does, what it does not do, and how we approach data protection under Nigerian law.
Clinicians decide
AI drafts notes, summaries and admin work. It does not diagnose, prescribe or make treatment decisions. A clinician reviews every clinical draft before it is used.
AI output is labelled
Anything the AI writes is marked as a draft until a person approves it, so staff always know what came from the AI.
Only the data care needs
AI features see only the information needed for the task in front of them, within the access rights of the person using them.
Accountable by design
Access and approvals are logged, so each organisation can see who did what and when.
What the AI does
- Transcribes consultations and drafts structured clinical notes
- Summarises a patient's history from their record
- Drafts prescriptions and referral letters for review
- Turns patient calls and USSD entries into clear, routed complaints
What it does not do
- Diagnose conditions or recommend treatment on its own
- Send anything clinical to a patient without staff approval
- Replace the judgement or responsibility of your clinicians
AI can make mistakes, especially with unclear audio or unfamiliar terms. That is why every clinical draft needs human review.
Languages and accuracy
Voice features are designed for how people in Nigeria speak, including local languages, accents and code-switching. Accuracy varies by language and audio quality. We test and confirm the supported languages with each clinic before go-live, rather than promising that every dialect works equally well.
Data protection
Our approach follows the Nigeria Data Protection Act 2023 and guidance from the Nigeria Data Protection Commission (NDPC). In practice this means:
- Each clinic is the data controller. We process patient data on its behalf under a written data processing agreement.
- Patient data is not used to train AI models unless the clinic agrees in writing.
- Access is permission-based and logged. Health IDs are shared across facilities only with the patient's permission.
- Data is encrypted in transit and at rest, and kept only as long as the agreement says.
Where we stand today
ClinicOS does not currently hold a regulatory certification, and we will not claim one until it is granted. We will publish any certifications or registrations here when we have them, and update this page as Nigerian rules on AI in healthcare develop.
Clinics can request our data processing agreement and security details before signing up. Email [email protected] or read our privacy policy.