Independent AI index
for professionals

Home / Safety / Noteless for GP practices

Noteless AS (Oslo, NO)

How safe is Noteless for GP practices?

GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is established in the Netherlands or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure for GP practicesStrong

Noteless has a strong published GDPR profile and, with the right business settings, is well suited for use in GP practices.

Where does Noteless stand among GP practice tools?

Shared place 1 of 26 options for GP practices (professional tools and general assistants) on the GDPR profile. 9 options, like Noteless, have a Strong profile. Each tile is an option we track for this field; click for the check.

Strong9
Good6
Limited2
Unknown2
Caution7

Published safeguards

✓Provider based in NL/EUYes
✓Data in the EU (according to provider)Yes
✓Publishes certification (ISO/NEN/GDPR)Yes

the language model used is not public; data stays within the EU/EEA, processing in European data centres, transcripts and notes stored encrypted for 24 hours; ISO 27001 and Cyber Essentials; CE-marked as a medical device (MDR); user data never used for training (according to provider)

How to use Noteless safely

  • Use the business variant and sign a data processing agreement (DPA).
  • Do not enter unnecessary personal data into prompts; anonymise where possible.
  • Enable EU data residency where the provider offers it.
  • Keep a professional in the loop: patient data is special category personal data (GDPR, WGBO).

Stronger or even strong in GP practices

Juvoly (Tandem Health)Juvoly B.V. / Tandem Health (Leiden)Huisartsen AIHuisartsen AI (Rotterdam)Medicom (PharmaPartners)PharmaPartners B.V. (Oosterhout, NL)MedendoMedendo B.V. (Utrecht, NL)AutoscriberAutoscriber B.V. (Eindhoven)

Questions

How safe is Noteless for GP practices?
Noteless has a strong published GDPR profile and, with the right business settings, is well suited for use in GP practices. EU options, no training on your data and/or self-hostable.
Does Noteless train on my data?
the language model used is not public; data stays within the EU/EEA, processing in European data centres, transcripts and notes stored encrypted for 24 hours; ISO 27001 and Cyber Essentials; CE-marked as a medical device (MDR); user data never used for training (according to provider)
What should I look out for with AI in GP practices?
Patient data is special category personal data (GDPR, WGBO). Only use systems with NEN 7510 certification, a data processing agreement and EU hosting; audio recordings of consultations must not be stored unencrypted with external servers. AI-supported triage and diagnostics are supportive, the GP remains ultimately responsible and must verify all AI output. Systems classed as high risk under the EU AI Act (diagnostic decisions) require an audit trail and explainability.

Source documents

www.noteless.comwww.noteless.comwww.noteless.comwww.noteless.com

Everything about Noteless Best AI for GP practices

Summarised by the editorial team from provider documentation · not legal advice

Last checked: 31 October 2026 · How we check

Next stepAll 26 options for GP practicesProfessional tools and general assistants side by side, on GDPR profile, price and quality.

Every Friday: what changed in AI for GP practices

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.