What is UK Sovereign?

Stored in the United Kingdom. Processed within the United Kingdom or European Union. The clinical record lives in London; the ordinary transcription route runs on Deepgram’s EU regional service and note drafting on Amazon Bedrock, invoked from AWS London and served in AWS’s UK or EU regions, under your organisation’s consent. That is the residency and processing promise for a United Kingdom organisation.

The service is open to United Kingdom organisations — see is Small Mercy available in the United Kingdom? for the detail.

What the profile means

United Kingdom organisations run UK Sovereign, which is its own region rather than a variation of the Australian one:

• The clinical record is stored in the United Kingdom — London — in a deployment that runs in its own cloud account, isolated from every other Small Mercy region. UK clinical data never co-mingles with another region’s.
• Transcription and note drafting run within the United Kingdom or European Union — transcription on Deepgram’s EU regional service (Frankfurt), note drafting on Amazon Bedrock, invoked from AWS London and served in AWS’s UK or EU regions — as the ordinary route for every consult, under the consent your organisation gives, disclosed on every note; ordinary consent to record is a separate authority, given for each consultation. UK-to-EU processing sits under the UK’s adequacy regulations for the EEA.
• The transcription provider receives anonymous diarisation only. Voice identity, including any voice profile, is not disclosed to it.
• Clinical data is never used to train models — not by Small Mercy, and not by our providers.

The optional Global note fallback is currently disabled. If enabled after an in-region drafting failure, a clinician may choose to send that consult’s transcript — not its audio or other outputs — for processing that may occur outside the UK and EU, for that consult’s note and later redrafts only. The organisation and session stay UK Sovereign, with no automatic switch.

One profile per organisation

An organisation runs on exactly one profile, set at sign-up and applied to everyone in it. It can’t be switched in place. The other profiles — AU Sovereign for Australia and New Zealand, and Global — are set out in the sovereignty profiles.

Storage is not processing, and it is worth keeping the two apart when you answer a patient or a medico-legal reviewer: on UK Sovereign the record lives in the United Kingdom, and the processing happens in the UK or EU — on named providers, listed with what each does and where on the UK sub-processor list.

The rest of it

The privacy architecture is identical on UK Sovereign: audio deleted by default, the QR deletion receipt, the append-only audit log, email sign-in with optional passkeys, and the rule that nothing is saved until you confirm it. What does differ is the clinical tuning — it is Australian, and MBS billing hints are switched off for UK organisations. See is Small Mercy tuned for UK medicine?

The contractual version of all of this is the UK privacy notice and the UK Data Processing Schedule.