We re-check published residency, subprocessor and certification pages and log every change. One email when something we track changes — nothing else.
Email only. Unsubscribe in one click from any email. We never share the list with vendors.
“stored in the United Kingdom / EU (London region) and encrypted in transit and at rest”tortus.ai
“Enterprise agreement with a zero-data-retention policy; data is not retained by, or used to train the models of, the provider; accessed via the provider's EU endpoint”tortus.ai
“OpenAI The consultation transcript text and clinician-provided context (not the audio recording) To generate draft clinical notes, letters and suggested clinical codes from the transcript”tortus.ai
“TORTUS AI share personal data with the following Third-Party service providers (sub-processors)”tortus.ai
“ISO 13485 · UKCA Class IIa Medical Device · NHS DTAC compliant”tortus.ai
“stored in the United Kingdom / EU (London region) and encrypted in transit and at rest”tortus.ai
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“Enterprise agreement with a zero-data-retention policy; data is not retained by, or used to train the models of, the provider; accessed via the provider's EU endpoint”tortus.ai
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“OpenAI The consultation transcript text and clinician-provided context (not the audio recording) To generate draft clinical notes, letters and suggested clinical codes from the transcript”tortus.ai
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
“ISO 13485 · UKCA Class IIa Medical Device · NHS DTAC compliant”tortus.ai
Answered only from what the vendor publishes on its own public pages, as at the check date shown. Not an assessment, audit, certification or endorsement.
The public tracker stays free — it always will. For organisations that need more, we’re building a professional tier: monitoring of your vendor list, change alerts with the evidence attached, audit-ready packs formatted for privacy impact assessments and automated-decision disclosures, and a quarterly analyst briefing.
From December 2026, the Privacy Act requires organisations to disclose automated decision-making in their privacy policies (Privacy and Other Legislation Amendment Act 2024, ADM transparency provisions) — which means knowing, on an ongoing basis, exactly what your AI vendors run and where. That’s what this register is for.
Founding membership is limited to the first 20 organisations and locks founding pricing permanently. Register interest now — founding members get first access and shape what we build.
Registering interest is not a purchase or commitment. The free public tracker is unchanged.
Are we missing something, or has this changed? Vendors and their representatives can submit a correction and we will update the entry, note the change and credit the source. Corrections are typically actioned within 2 business days.
Submit a correction