Healthcare-grade security, by default
Patient trust is everything. Maxillo is engineered to the standards UK dentistry requires — data kept in the UK, encrypted end to end, and a full audit trail on every action the system takes on your behalf.
UK data residency
All patient data is stored and processed in the United Kingdom. It never leaves the region.
UK GDPR
Built to UK GDPR, with a DPA available for every practice.
Encrypted throughout
Encryption in transit (TLS 1.2+) and at rest (AES-256), with strict isolation between practices.
Role-based access
Granular role-based access keeps the right data with the right people.
Full audit trail
Every AI action is logged and reviewable — you can always see what happened, when and why.
Human in the loop
Clinical outputs are reviewed and signed by your team. AI assists; clinicians decide.
One record, protected at every step
Because everything runs on a single patient record, there are fewer copies to secure — and a single, clear chain of custody.
Captured once
Data enters through a single workflow and is written to one unified patient record — no scattered copies across tools.
Encrypted & isolated
It's encrypted at rest and logically isolated per practice, so one practice's data is never visible to another.
Accessed by role
Only the people who need it can see it, governed by role-based permissions.
Logged & reversible
Every change and AI action is recorded in an immutable audit trail.
The frameworks we hold ourselves to
Some are in place today; others are actively underway. We'll never claim a certification we don't hold.
Need our DPA, sub-processor list or a security questionnaire completed? Contact our teamand we'll turn it around quickly.
Responsible disclosure
Found a vulnerability? We want to hear from you. Report it privately and we'll acknowledge within one business day — we don't pursue good-faith researchers.
Security questions before you commit?
Book a call with our team — we'll walk through architecture, data residency and compliance in detail.
UK-built · UK GDPR · No long-term contract