Our position on AI.

Australian-owned and sovereign

VitalSignRx is wholly Australian-owned and Australian-founded. The company, its intellectual property and its leadership are based in Australia and operate under Australian law.

Patient data is stored, processed and accessed onshore in Australia, by authorised Australian-based personnel. Our development is Australian-led and Australian-controlled.

For government, defence and regulated organisations, this matters. Where procurement requires genuine sovereign capability — free of foreign ownership or control — VitalSignRx qualifies. The ownership, the decisions, the intellectual property and the data stay in Australia.

What our AI does

We deploy, develop and connect AI capabilities across the VitalSignRx platform, including:

• Assisted report writing (in development) — structures and formats content the clinician has authored, within clinically approved templates. The clinician reviews and attests to every paragraph as their own opinion.
• Voice-to-text — verbatim clinical transcription that reduces administrative load. Audio is not retained.
• Voice-to-voice with multi-language support — real-time spoken interaction across languages.
• Indexing of medical reports — fast, structured retrieval across large document sets.
• Multi-language medical questionnaires — translated intake that meets patients in their language.
• Bespoke coding of medical workflows — configurable automation tailored to each provider.
• Business intelligence — turning operational data into clear decisions.

In every case, the AI records, translates, structures or retrieves information. It does not originate clinical content. The professional decides.

Where we draw the line

Our AI does not diagnose, and does not suggest potential diagnoses, prognoses or treatment. That is the role of the qualified clinician.

We have completed a documented, capability-by-capability assessment of our platform against the Therapeutic Goods Administration's criteria for software-based medical devices. VitalSignRx is clinical information management software: it is not intended for diagnostic or prognostic purposes, and it does not process or analyse signals or images from medical devices. No AI capability is released without a regulatory assessment, and we review our position whenever the guidance changes.

Humans stay in charge

• Every paragraph, every time. Where AI assists in preparing clinical documentation, the clinician reviews and attests to each paragraph as their own opinion. There is no bulk approval, a document cannot be finalised until every paragraph is attested, and every attestation and edit is logged.
• No decision is made by our AI alone. Fitness-for-work, capacity and clinical decisions are made by qualified health professionals exercising their own judgement.
• You can ask for a human. Anyone may request human review of an outcome in which our AI assisted. Our Privacy Policy sets out how.

What we will never do

• We do not sell patient data. Not now, not ever.
• We do not feed patient or client data into the training of public or frontier large language models. Your data trains our service for you — it does not leave to improve someone else's model.
• We do not give identifiable patient data to any third-party or frontier AI provider. Where we connect to third-party AI, we assess it for data handling and sovereignty first, and it receives de-identified information only.
• We do not create voiceprints or identify people by their voice.

How we govern AI

• Onshore and sovereign. Patient data is stored and processed in Australia, under Australian data and computing law. Our AI runs on infrastructure we control.
• Protected by design. We never use production patient data for development or testing. Every non-production environment is irreversibly masked, so identifiable patient information exists only in our secured, onshore production systems.
• Australian Privacy Principles. We handle personal and health information in line with the Privacy Act and the Australian Privacy Principles, including the automated-decision transparency requirements that commence on 10 December 2026.
• Certified security. VitalSignRx is ISO 27001 certified by a JAS-ANZ accredited certifier (Joint Accreditation System of Australia and New Zealand), with encryption, access controls and full audit logging.
• Aligning to ISO/IEC 42001. We are building our AI governance processes to align with the international AI management standard, so we are audit-ready for future certification.
• Transparent and accountable. AI outputs are reviewable, attributable and auditable, and AI activity logs are retained for seven years. The human reviewer remains responsible for the final result.
• Errors are incidents. If an AI capability introduces an error into a record, we treat it as an incident: we correct the record, keep an audit trail and notify those affected.

We treat our AI the way we treat any clinical tool: it must be safe, governed and worthy of trust before it goes near patient care.

For the detailed disclosure of each AI capability, the personal information it uses, and how to request review, read our Privacy Policy.

Last updated: September 2026.