Alethexis
Sign Up
Sectors

Private Healthcare

Triage, assisted clinical documentation and diagnostic support with sensitive data.

Health dataClinical documentationDiagnostic support

Private clinics and healthcare centres are adopting AI for triage, assisted clinical documentation and diagnostic support, always with particularly sensitive data. Alethexis helps you inventory each system, document its use and keep traceable evidence, with healthcare-sector examples.

Where the Regulation places you

Clinical AI in a private practice almost always enters through the medical device route, not Annex III: if the system is a medical device or its safety component under Regulation (EU) 2017/745 (Annex I) and requires third-party conformity assessment, it is high-risk under Article 6(1).

Annex III, point 5(a), reaches only systems “used by public authorities or on behalf of public authorities to evaluate the eligibility of natural persons for essential public assistance benefits and services, including healthcare services”: the private practice is not there. That annex only returns through its point 5(d), for “emergency healthcare patient triage systems”, with the Annex III date (2 December 2027).

Obligation applicable from 2 August 2028 through the Annex I route (Article 26; Article 113, third paragraph, point (c), as worded by Regulation (EU) 2026/1744) — preparation recommended. The Article 27 impact assessment (FRIA) does not reach this route: it operates only on Annex III systems.

What to do today, whichever the route: check whether the processing requires an Article 35 GDPR impact assessment — large-scale processing of health data is one of the cases that does — and keep the inventory with the professional oversight of each system, which is what M3 documents.

Annex III: the eight high-risk areas under Article 6(2)Annex III to Regulation (EU) 2024/1689MAY FALL WITHIN HIGH RISK · CLASSIFICATION IS SYSTEM BY SYSTEM (ART.6)ANNEX III · AREAS UNDER ARTICLE 6(2)POINT 1Biometricsin so far as their use ispermitted under relevantUnion or national lawPOINT 2Critical infrastructurePOINT 3Education andvocational trainingPOINT 4Employment, workers’management and accessto self-employmentPOINT 5Access to andenjoyment ofessential privateservices and essentialpublic servicesand benefitsPOINT 6Lawenforcementin so far as their use ispermitted under relevantUnion or national lawPOINT 7Migration, asylum andborder controlmanagementin so far as their use ispermitted under relevantUnion or national lawPOINT 8Administration ofjustice and democraticprocessesAnnex III to Regulation (EU) 2024/1689 · Regulation (EU) 2026/1744 does not amend its eight areas
A system in these areas may fall within high risk; classification is done system by system (Article 6), against the specific letter of each point and its exceptions. AI in a medical device generally comes in through Article 6(1) and Annex I, Section A: where the system is the device or its safety component and requires third-party conformity assessment. These eight areas do include emergency healthcare patient triage (point 5(d)).
Read more: Private healthcare: the sector where high risk really is in the core activity — and through two different routes

Typical AI systems in the sector

Assisted triage

Automated prioritisation of care.

Clinical documentation

Assisted transcription and drafting of reports.

Diagnostic support

Assisted analysis of tests and images.

Illustrative examples. Alethexis classifies each system inside the platform, case by case, according to how you use it.

Start with the tools your sector uses.

When you register the use of an AI tool, Alethexis suggests the ones your sector typically uses — in Private Healthcare, for example Aidoc, Lunit INSIGHT and Doctoralia — and fills in the name, the provider and a purpose you can change. The ones that usually require a high-risk assessment carry a notice, so they are not treated as closed before they are classified.

It does not classify, does not detect, and does not judge any tool. No "recommended" or "safe".

What worries you

  • You handle health data intensively.
  • Professional oversight is non-negotiable.
  • You need to demonstrate governance to patients and authorities.

How Alethexis supports you

  • Inventory with healthcare-sector examples.
  • Documentation of human oversight and of clinical use.
  • Auditable evidence with full traceability.

Reading for your sector

AI in the dental clinic: where the real risk sits and what to document nowFRIA and DPIA are not the same thing: why one does not replace the otherThe AEPD's Article 35(4) list: when your AI requires a DPIA even if it is not high-risk under the AI Act

Start with your sector

14-day free trial, no card required. With examples already configured for your industry.

14-day free trial
See all sectors