Acceptable use policy

Accounts are for individually named healthcare professionals holding current registration with a recognised UK regulator or professional body (for example HCPC, GMC, NMC or BPS), and for administrative staff acting under a named clinician’s supervision within the same practice. Credentials are personal and must never be shared, reassigned or held in a shared mailbox.

The platform may be used only to prepare, review, approve and share neurodevelopmental assessment documentation for patients for whom you or your practice holds a legitimate clinical relationship and a valid consent record. Each clinician must use their own authenticated account and keep its credentials secure.

You must not: store data unrelated to neurodevelopmental assessment documentation; enter patient data without the consent recorded in the consent module; attempt bulk extraction, scraping or automated harvesting of records; probe, reverse engineer, decompile or attempt to extract model weights, prompts or pipeline internals; circumvent authentication, access controls, rate limits or audit logging; upload malware or deliberately malformed content; resell, sublicense or provide the platform as a service to third parties; or use the platform to produce content that is presented as a diagnosis made by software rather than by a clinician.

All AI output is a draft. You must read, correct and approve every draft before clinical use, and you must not disable, bypass or misrepresent the pseudonymisation step or the draft labelling that appears on unapproved reports.

We may suspend or restrict an account immediately where we reasonably believe this policy has been breached, where continued access presents a risk to patient data, or where we are required to do so by law. Where suspension is not urgent we will contact the account holder first. Confirmed breaches involving personal data are handled under our breach procedure in the Privacy notice, and serious professional concerns may be reported to the relevant regulator.

Report suspected misuse, credential compromise or a security weakness to security@neuroscribe.co.uk. Please do not test another practice’s data or attempt to access records that are not yours in order to demonstrate an issue.