Skip to main content

    Caredact for local authorities

    AI your social care teams are allowed to use.

    Councils know their practitioners are using AI, sanctioned or not. The choice is between a tool the information governance team has assessed and a mix of personal chatbot accounts nobody can see.

    Caredact gives every team the same flow: personal data is replaced before text reaches the AI, a person reviews what was found, and the export restores the details. The council gets an audit trail, admin controls and a Data Processing Agreement to assess.

    14-day trial. No card. Data stays in the UK.

    What is in your records

    The identifiers Caredact removes before the AI sees a word.

    Each one becomes a labelled placeholder such as [PERSON_1] or [NHS_NUMBER_1]. The writer sees every detection highlighted before anything is sent.

    • Children, adults, families and professionalsnames and relationships across children’s and adults’ services
    • Case referencesyour own reference formats, looked-after-child and court numbers
    • Addresses, schools and placementsnamed settings and providers
    • Health detailsNHS numbers, medication, diagnoses, named services
    • Dates and contact detailsbirths, incidents, phone numbers, emails

    Where it fits

    Three jobs it does on day one.

    1. 1

      A sanctioned tool instead of shadow AI

      Roll out one assessed tool with an audit trail, rather than discovering personal chatbot accounts after an incident.

    2. 2

      Assessments, reviews and correspondence

      Practitioners get the writing help they are already seeking, with the identity of the family kept out of the AI.

    3. 3

      Evidence for your DPO and for regulators

      The audit log, the review step and the DPA are the documents an information governance lead needs to sign this off.

    For your regulator and your DPO

    What you can show an inspector.

    • A full audit trail per user and per document.
    • Admin controls: who has access, retention periods, two-factor authentication where you require it.
    • A Data Processing Agreement written for controllers in the public sector.
    • UK processing and storage. Placeholder maps deleted when a document is finished or at the end of your retention period.

    Questions from local authorities

    Asked before, answered here.

    More on the main FAQ, or ask us.

    Can we run a pilot with one team first?

    Yes. Most authorities start with a single team on the Provider plan, review the audit trail and the DPA, and then talk to us about Enterprise terms for a wider rollout.

    Does it support single sign-on?

    Single sign-on, a dedicated account manager, custom onboarding and a service level agreement are part of the Enterprise plan.

    Where is data processed?

    In the UK, including the AI. Only the checked, placeholder version of the text is sent to the AI; the placeholder map that could reverse it is encrypted, never sent to the AI, and deleted when the document is finished or reaches its retention date.

    The right plan

    Enterprise.

    Unlimited users, single sign-on, onboarding and an SLA. Pilots usually start on Provider. Every plan starts with a 14-day free trial and no card.

    See pricing

    Give your team AI they are allowed to use.

    14-day free trial. No card. Set up in minutes.