Platform

Everything you need
to build stronger cases.

Six integrated capabilities, grouped around what they help your team actually do: understand the record, identify protocol issues, verify the evidence, and protect sensitive data.

Analyse Medical Records in Minutes, Not Weeks

Upload PDF medical records, including scanned and handwritten documents, and let our AI extract key clinical events, medications, diagnoses, and treatment timelines automatically.

  • Handles large PDF documents, including scanned pages
  • Intelligent OCR detection that only applies where needed
  • Chronological medical timeline extraction by event category
  • Real-time progress tracking as your case is processed

medical-records-2024.pdf

PDF, 847 pages

75%
OCR active, 23 scanned pages detected
12 Mar 2023 GP Referral to Specialist
04 Jun 2023 MRI Scan Result
18 Sep 2023 Surgical Consultation

47 events extracted...

Seven Parallel Protocol Compliance Analyses

Our AI runs seven simultaneous analyses against clinical protocols, checking delays, missed appointments, care pathways, treatments, medications, and more. Semantic search finds relevant protocol sections.

01

Care Delays

Complete
02

Missed Appts

Complete
03

Pathways

Complete
04

Treatment

Complete
05

Medication

Complete
06

Follow-up

Running...
07

Referrals

Running...
Semantic search: finding "missed follow-up appointment" in NICE CG76 Section 4.2...
Delays in care, missed appointments, and care pathway compliance
Treatment and medication compliance checking
Semantic protocol search that finds relevant guidance even with different terminology
User-focused analysis guided by your specific areas of concern
Finding #3: Delayed Referral 8/10

"Patient was not referred to cardiology despite presenting with persistent chest pain on three consecutive visits..."

NICE CG95 Section 3.1 Page 47
Finding #7: Incomplete Medication Review 5/10

"Annual medication review was overdue by 4 months. No documented assessment of side effects..."

NICE CG76 Section 2.4 Page 112
12 findings total
3 Critical 5 Medium 4 Low

Severity-Scored Findings with Evidence Citations

Every potential issue is structured as an evidence-linked finding with a 1 to 10 severity score, direct evidence from the medical record, protocol references, and prompts for qualified professional review.

  • Severity score (1 to 10) to help prioritise professional review
  • Direct quotes from the medical record as evidence
  • Specific protocol section references for each finding
  • Page-level citations back to the original document

Severity scoring

How severity scoring works.

Every potential finding is assigned a severity score on a 1 to 10 scale to help qualified reviewers prioritise their attention. It is not a determination of negligence or causation. The score helps the team look at the most consequential potential issues first.

1 to 3 · Low

Minor or administrative issues for review where time allows.

4 to 6 · Medium

Potentially material issues worth a closer look during professional review.

7 to 10 · High

Potential issues prioritised at the top of the queue for qualified review.

What the score does not mean

The score is not a determination of negligence, causation, or harm. It is a prioritisation aid for professional review. A qualified solicitor and/or medical professional must review the underlying evidence and reach the legal/clinical view.

Ask Anything About Your Case

Ask natural language questions about any case and get source-cited answers grounded in the actual medical record. Powered by RAG with page-level references, designed to reduce unsupported answers.

Case Chat · Smith v. NHS Trust

Was the patient referred to a specialist after the abnormal blood results?

Based on the medical records, the patient was not referred to a specialist following the abnormal blood results on 15 March 2023. The GP noted the results but documented "monitor and repeat in 3 months" without referral.

Source: Page 47, Para 3

What does the relevant NICE guideline recommend in this situation?

Ask a question about this case...
Natural language questions with page-level source citations
Grounded responses with source citations to reduce unsupported answers
Conversation memory for follow-up questions
Persistent chat history across sessions

Triple-Layer PII Sanitisation

Before any text reaches an AI model, all personally identifiable information is stripped through three independent detection systems: Microsoft Presidio, spaCy NER, and 30+ UK medical record regex patterns.

Raw Text

John Smith, DOB 15/04/1962, NHS No: 943 476 5919, seen at Royal London Hospital

Triple-Layer Sanitisation

Layer 1: Microsoft Presidio
Layer 2: spaCy NER
Layer 3: 30+ UK Regex Patterns

NHS numbers, postcodes, GMC numbers...

Sanitised Text

[PATIENT], DOB [DATE], NHS No: [NHS_NUMBER], seen at [HOSPITAL]
Microsoft Presidio enterprise PII engine as first layer
spaCy named entity recognition as second layer
30+ custom regex patterns for UK medical identifiers
NHS numbers, postcodes, GMC numbers, and more, all removed

Built to Support UK GDPR and Enterprise Security

AES-256-GCM encryption at rest with per-record nonces and tamper detection. Built to support UK GDPR requirements, including PII sanitisation, audit logging, and European hosting.

AES-256

GCM encryption at rest

Algorithm:AES-256-GCM
Key Derivation:Per-record nonce
Auth Tag:128-bit GMAC
Tamper Detection:Enabled

Built for UK GDPR

PII sanitisation, audit logging, European hosting

Security Layers

Rate Limiting
CSRF Protection
Security Headers
Audit Logging

End-to-End Data Protection

Every layer designed to keep sensitive medical data secure.

Automatic data purge after configurable retention period
Full audit trail for every record access and action
Data Processing Agreement available for all plans
PII stripped before any data reaches AI models

Frequently Asked Questions

Common questions about MedCase AI's capabilities and security.

What file formats and sizes are supported?
MedCase accepts PDF documents up to 2 GB, including scanned and handwritten documents. The system automatically detects whether pages need OCR and applies it where needed. You can also force OCR on all pages for PDFs with unreliable embedded text.
How accurate is the AI analysis?
MedCase uses Claude Sonnet 4 by Anthropic for its protocol compliance analysis, running seven parallel analyses simultaneously to maximise coverage. Every finding includes direct evidence citations with page references and specific protocol section references, so qualified reviewers can verify each finding against the original document. MedCase is designed to flag potential protocol deviations for professional review. It supports qualified legal and medical professionals rather than replacing them.
Can MedCase AI handle handwritten medical records?
Yes. MedCase AI includes intelligent OCR detection that automatically identifies scanned and handwritten pages. When OCR is needed, each page is rendered at 300 DPI and processed through an enterprise OCR engine. You can also force OCR on all pages for PDFs with unreliable embedded text layers. The system tracks which pages required OCR so you can assess extraction quality.
What clinical protocols does MedCase AI support?
MedCase AI supports analysis against any clinical protocol that is uploaded to the platform. This includes NICE guidelines, Royal College guidelines, local NHS trust protocols, and other clinical standards. Protocols are chunked and embedded as vectors, enabling semantic search, so the system finds relevant protocol sections even when the medical record uses different terminology.
How does the AI case chat work?
Every case includes an AI chat interface powered by Retrieval-Augmented Generation (RAG). You can ask natural language questions about any medical record and receive answers grounded in the actual document with page-level citations. The chat remembers previous messages for follow-up questions, is isolated per case, and the history is saved across sessions.
Can multiple team members use the same account?
Yes. MedCase AI is built for teams. Every account is organised around organisations with unlimited team members on all plans. Organisation owners can control case visibility, either allowing all members to see all cases or restricting visibility so members only see cases they created.
What is the maximum file size and page count per case?
MedCase accepts PDF documents up to 2 GB per upload, and supports cases with multiple uploads. There is no fixed page-count limit. Typical clinical negligence cases run from a few hundred pages to several thousand pages, and larger record sets are processed with progress tracking.
How are hallucinations controlled?
MedCase is designed to produce grounded responses with source citations to reduce unsupported answers. Findings and chat answers cite the page of the underlying medical record and, where relevant, the specific protocol section. All outputs are intended as an analytical aid for qualified professional review, so reviewers can verify each citation against the original document. MedCase does not make absolute claims of "no hallucinations".
Is human review still required?
Yes. MedCase is an analytical aid for qualified legal and medical professionals. It does not constitute medical advice, a diagnosis, a legal opinion, or a determination of negligence. All outputs should be reviewed and verified by a qualified solicitor and/or medical professional before use in any legal matter.
How is my data protected?
All data is encrypted with AES-256-GCM at rest with per-record nonces and tamper detection. A triple-layer PII sanitisation system removes patient-identifiable information before any AI processing. MedCase is built to support UK GDPR requirements, with comprehensive audit logging and European hosting.
Does patient data leave the UK?
No. All data is stored and processed within Europe. MedCase AI is registered with the UK Information Commissioner's Office (ICO) and does not transfer patient data outside European jurisdiction. PII sanitisation ensures that no patient-identifiable information is sent to any external AI service.
What is triple-layer PII sanitisation?
Before any medical record text reaches an AI model, it passes through three independent detection systems: Microsoft Presidio (an enterprise PII engine), spaCy named entity recognition, and 30+ custom regex patterns designed specifically for UK medical records. This layered approach catches NHS numbers, names, addresses, dates of birth, GMC numbers, postcodes, and dozens of other identifier types. The result is comprehensive PII removal with minimal risk of leakage.
What are MedCase's default data retention settings?
The default retention period is 7 years to align with typical clinical negligence limitation periods. Retention is configurable per organisation, and complete case deletion is supported on request. End-of-contract handling is described in our DPA, available on request.
Is a DPA available?
Yes. A Data Processing Agreement is available on all plans. Procurement teams can request a DPA, DPIA support, and our subprocessor list via the trust centre or hello@medcase.ai.
Is MedCase AI built for UK GDPR?
Yes. MedCase is built to support UK GDPR requirements, including PII sanitisation, audit logging, and European hosting. We process medical records under Article 6(1)(f) legitimate interest and Article 9(2)(f) for legal claims involving special category health data. We implement data minimisation through PII sanitisation, maintain configurable data retention policies (default 7 years), support the right to erasure with complete case deletion, and maintain comprehensive audit trails. We are registered with the ICO and all data stays within European jurisdiction.

See It in Action

Book a personalised demo to see how MedCase AI can transform your case preparation workflow.