Question 1

Where does Tortus store patient data?

Accepted Answer

United Kingdom / EU (London region) - Google Cloud storage of consultation audio and account identifiers Published statement: "stored in the United Kingdom / EU (London region) and encrypted in transit and at rest" (source: https://tortus.ai/privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 2

Where does Tortus process data?

Accepted Answer

Privacy policy states transcript text is processed by OpenAI via the provider's EU endpoint under a zero-data-retention enterprise agreement Published statement: "Enterprise agreement with a zero-data-retention policy; data is not retained by, or used to train the models of, the provider; accessed via the provider's EU endpoint" (source: https://tortus.ai/privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 3

Which AI models does Tortus use?

Accepted Answer

OpenAI models generate draft clinical notes, letters and suggested clinical codes from consultation transcripts (transcript text only, not audio); zero-data-retention terms stated Published statement: "OpenAI The consultation transcript text and clinician-provided context (not the audio recording) To generate draft clinical notes, letters and suggested clinical codes from the transcript" (source: https://tortus.ai/privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 4

What certifications does Tortus publish?

Accepted Answer

ISO 13485; UKCA Class IIa Medical Device; NHS DTAC; ISO 27001 ISMS also referenced in privacy policy Published statement: "ISO 13485 · UKCA Class IIa Medical Device · NHS DTAC compliant" (source: https://tortus.ai/privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 5

Which subprocessors does Tortus name?

Accepted Answer

Google Cloud (Google Cloud Platform), OpenAI, Auth0 (by Okta), Datadog Published statement: "TORTUS AI share personal data with the following Third-Party service providers (sub-processors)" (source: https://tortus.ai/privacy, checked 2026-09-25). Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 6

What does Tortus publish about TGA status?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 7

Which practice management systems does Tortus list as integrations?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 8

Which Australian or New Zealand entity does Tortus contract through?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Question 9

What support hours does Tortus publish?

Accepted Answer

Not found on public pages. We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere. Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.

Tortus

Data storage region

Data processing region

Model provenance

Subprocessors

Certifications

TGA status

PMS integrations

ANZ entity

Support hours

What Tortus publishes — answered from the record

Something wrong or out of date?