AI for dental practices and clinics, with patient data handled first
We help dental practices, physiotherapy and therapy clinics, opticians and other private practices automate front-desk admin: reminders and cancellations, recalls, new-patient forms and the practice inbox. Much of it runs without the AI ever seeing a clinical record. Anything involving health information starts with a DPIA, a lawful basis and the right processor terms.
The front desk is where the hours go
In most practices the pressure isn’t the clinical work. It’s the phone, the inbox and the diary around it.
Reception teams confirm appointments, fill cancellations, chase medical history forms, answer the same price questions and send recalls, often with a patient waiting at the desk. Your practice management system does some of this; the rest happens in inboxes, spreadsheets and on the phone. That’s the work we automate.
We don’t claim healthcare clients. What we bring is Alphabyte IT’s IT management and data-protection work across South Wales since 2009, and a founder, Ross Owen, who has specialised in IT for legal and professional firms since 2000.
- 1Patient cancelsText reply, email or logged call
- 2Slot freed in the diaryRules, not AI: no clinical record involved
- 3Waiting list offered itIn turn; first to accept gets it
- 4Diary updatedReception sees what changed
The admin around the appointments
Reminders and confirmations
Replies to reminders sorted and the diary updated. If your system already sends reminders, we don’t duplicate them; we fill the gaps.
Filling cancellations
Freed slots offered in turn to waiting-list patients who want an earlier appointment of that type.
Recalls and reviews
Patients due a check-up or review invited at the interval their clinician set, chased if they don’t book, and passed to reception if they lapse.
New-patient forms
Registration, medical history and consent forms sent before the first visit and chased until done. The automation only needs to know they’re complete, not what they say.
The practice inbox and phones
Booking requests, price questions and new-patient enquiries sorted, with replies drafted from your approved information. Missed calls become callback tasks.
Training and compliance reminders
CPD and mandatory training renewals tracked for each team member, with reminders before they lapse.
Referral letters drafted from a clinician’s notes are possible too, checked and signed by the clinician. They put clinical content in front of the AI, so they come after the data work below.
Health data comes first, not last
Health information is special category data under UK GDPR, and the ICO counts more as health data than many practices expect.
It isn’t only clinical notes. The ICO says appointment details can be health data when they reveal something about someone’s health: a run of physiotherapy sessions might, a single check-up might not. So even admin automations use only what each step needs.
Your regulators expect the same care. The GDC’s standards require dental teams to keep patient information confidential, use it only for the purpose it was given and keep it secure; the HCPC and GOC set similar duties for physiotherapists and opticians.
In England, dental practices fall within the CQC’s scope, while a physiotherapist or optician running a standalone treatment service usually doesn’t need to register for treatment of disease, disorder or injury. In Wales, Healthcare Inspectorate Wales registers private dental practices and independent clinics. England’s Caldicott Principles make a good test for any automation: justify the purpose, use the minimum necessary. Vets are a lighter case: UK GDPR’s health data is about people, not animals.
This is general information to help you plan, not legal advice.
What comes before anything is built
- Admin without clinical records. Reminders, recalls, waiting lists and form chasing are mostly rules-based workflow automation, with no AI reading anything.
- Health information? The paperwork first. A data protection impact assessment (DPIA), a lawful basis plus an Article 9 condition, and a written processor contract (a data processing agreement). We help you prepare them; as the controller, you decide.
- Business-grade AI under contract. We build with Anthropic’s Claude through its business service, which doesn’t train on your data and is covered by a data processing agreement. We never use consumer chatbots with patient data.
- In-house AI, coming soon. AI on our own hardware in Cardiff, for work where patient data shouldn’t leave the building.
- Until then, our advice: keep clinical content out of cloud AI unless your practice is satisfied its data-protection and regulator obligations are met.
- Clinicians decide. Nothing we build triages, diagnoses or suggests treatment.
How the standard pack fits a practice
Both Monthly AI Support plans include our standard pack. Here’s where each part fits in a practice, and where it waits for the data work.
Meeting minutes
Team and practice meetings written up with actions in your template. Never patient appointments.
Inbox assistant
The reception mailbox sorted and routed, with replies drafted for checking. Patients put health details in emails unprompted, so this starts with the DPIA. Inbox automation
Staff onboarding
New receptionists, nurses and therapists get a welcome pack, videos and policy sign-offs, including confidentiality.
Knowledge assistant
Staff ask how to handle a refund or a complaint and get answers from your own procedures. No patient data involved. AI assistant
Call summaries and follow-ups
Missed calls become callback tasks, with no recording needed. Summarising patient calls waits for the DPIA; a weekly calls report covers the gap.
AI safe-use policy
Agreed at set-up, so everyone knows patient details never go into public chatbots.
Plan hours, four a month on Essentials (£459 + VAT) or eight on Growth (£859 + VAT), go on work specific to your practice: cancellations, recalls, form chasing and training reminders. Unused hours roll over; the minimum term is 12 months. A bigger build, such as connecting to your practice management system, is usually a single project at a fixed quote. Your AI dashboard shows numbers, never content: how many reminders went out, not who they went to.
Questions practices ask us
Can a dental practice use AI without patient records going into it?
Yes, for a lot of the admin. Reminders, cancellations, recalls and form chasing run on contact details and appointment times, often as rules-based automation that never asks AI to read anything. Appointment details can still be health data, so each step uses only what it needs.
Do we need a DPIA before using AI with patient data?
Assume so. The ICO’s health and social care guidance says a DPIA is highly likely to be needed when new technology is used with health information, and its AI guidance says most uses of AI involve high-risk processing. You’ll also need a lawful basis, an Article 9 condition and a processor contract.
Will it work with our practice management software?
We build alongside it. Many systems can share appointment and contact information with other software, and some already send reminders, which we don’t duplicate. Where a system can’t connect, email, online forms or Microsoft 365 often can. The free audit checks yours.
Can AI write clinical notes or make clinical decisions?
Nothing we build makes clinical decisions: no triage, diagnosis or treatment advice. Letters drafted from a clinician’s own notes are possible, checked and signed by the clinician, but they involve clinical content, so they come after the DPIA. Until our in-house AI is running, we’d keep clinical content out of cloud AI unless your practice and its regulator obligations are satisfied.
We’re a mixed NHS and private practice. Does that change anything?
It can. NHS work brings its own information governance rules: in England, every organisation with access to NHS patient data and systems must use the Data Security and Protection Toolkit. We check what your NHS contract allows before connecting anything.
Want Microsoft 365 locked down properly?
Alphabyte IT secures Microsoft 365 for businesses across South Wales and helps them get Cyber Essentials certified.
How much of your front desk’s day goes on chasing and confirming?
Find out in a free automation audit, with a plain-English report of where the savings are and the data-protection points for each.
Book a Free Audit →