Security & Data Handling
Designed with privacy, transparency and responsible AI-assisted workflows in mind.
A careful approach to sensitive information.
Ellom helps care homes process referral and pre-admission paperwork more efficiently, while recognising the sensitive nature of the resident information involved.
The platform is designed with privacy, security and the responsible handling of information in mind, and to support — not replace — the judgement of trained care staff.
Built on established cloud providers.
Ellom uses established cloud infrastructure providers for secure hosting, authentication and data storage. These services give us a well-maintained foundation to build on, with regularly updated security practices.
Using these providers does not by itself make any application compliant with UK GDPR. Responsibility for how data is handled within Ellom remains with us.
UK and EU regions where practical.
We aim to use UK and/or EU-based hosting regions wherever technically practical. As the platform develops, we will continue to refine how and where data is processed.
Selected infrastructure and AI service providers may process data for summarisation and workflow support purposes. We do not claim UK-only storage or that no international processing ever occurs.
Encrypted in transit and at rest.
Data is encrypted in transit and at rest using industry-standard encryption methods provided by our infrastructure partners.
- • Authenticated staff access with per-account credentials.
- • Access controls intended to limit information to those who need it.
- • Hosted on secure, managed cloud infrastructure.
AI-assisted, not AI-decided.
Ellom uses AI-assisted document extraction and summarisation to help teams read and organise referral packs more quickly. Outputs are designed to support human review.
The system does not make clinical decisions. Professional judgement from trained staff remains essential at every stage of the admissions process.
Customer referral documents are not used to train public AI models.
Reviewed by people before any decisions.
All AI-generated summaries and extracted information should be reviewed by appropriately trained staff before decisions are made.
Ellom is intended as a workflow support tool. Final responsibility for accepting or declining an admission, and for any care decisions, sits with the care home and its staff.
Controls that will continue to evolve.
Retention and deletion controls will continue to evolve as the platform develops. Where possible, we aim to keep information for only as long as it is needed to support the referral and admission process.
We do not currently make guarantees about instant deletion across all systems, including backups.
Early-stage platform notice
Ellom is currently in prototype/MVP development. Security, retention and compliance processes will continue to evolve as the platform matures. We are happy to discuss our current approach with prospective customers in more detail.
Questions about how we handle data?
We're glad to talk through our current approach to security, hosting and AI usage with care home managers and their teams.