Ask ElsieEvery practice is walled off
Each workspace's patients and records are kept separate, and every request is checked against the signed-in practice. Billing practices see only the cases a client chooses to hand over.
Access by role
Clinical notes, questionnaires and patient replies are restricted to the roles that need them. Billing staff never see clinical answers.
Protected sign-in
- New accounts verify their email address and mobile number
- Passwords are salted and hashed; sessions are stored only as hashes and can be revoked
- Repeated failed sign-ins pause further attempts
- Patients use a one-time code that expires in 10 minutes, and portal sessions end after 15 minutes idle
Encrypted, online and on device
Ask Elsie is served over HTTPS, and credentials for connected services are encrypted. Records kept on an iPhone or iPad for offline use are encrypted and locked behind Face ID or a passcode, and offline access expires.
Patients enter card details only on Hello Clever's secure checkout. Ask Elsie never sees or stores them.
Calls recorded only with consent
Recording is off for every call. It starts only after the caller confirms everyone has agreed, and it can be paused at any time.
A complete audit trail
Changes are recorded with who made them and when. Corrections are added rather than written over, and issued documents can't be altered.
Questions
- Where is Ask Elsie hosted?
- Application hosting is configured in Sydney. Some connected services, such as calling, email and AI assistance, may process information in other countries. Our privacy policy has the details.
- Does automation make decisions about patients?
- No. Ask Elsie can prepare work, such as reading a theatre list or drafting a reply, but a person approves every change, message and fee. Clinical decisions stay with clinicians.