AtlacareGDPR by design, not bolted on
GDPR-compliant practice management software
Atlacare treats patient health data as special-category data from the ground up: stored in EU regions, with consent tracking, right-to-erasure, data export, audit logs and country-aware retention built in. UK & EU GDPR compliant — and free to start, no card.
Free plan · no card · 20 patients free forever · UK & EU data
What makes practice management software GDPR-compliant?
For a health clinic, GDPR-compliant software must treat patient data as special-category data: store it in an appropriate region, record a lawful basis and consent, let patients exercise their rights (access, erasure, portability), keep an audit trail of who did what, and apply the correct retention period. Compliance isn't a badge — it's these capabilities being present and enforced in the software itself.
Atlacare was built this way from the first version of the database, not retrofitted. Data lives in EU regions and never leaves; there are no AI sub-processors handling your patients' data.
The GDPR capabilities that actually matter
EU-region data residency
All patient and clinical data is stored in EU-region infrastructure and never shipped elsewhere.
Special-category handling
Health data is treated as special-category throughout, with a recorded lawful basis and consent tracking per patient.
Right to erasure
Anonymise a patient record on a valid request, while retaining what financial and clinical retention law requires.
Data export & portability
Export a single patient's data for a SAR, or your whole organisation's, as CSV — no exit fee, no ticket.
Audit logging
Every significant action is written to an audit log, so a later review can reconstruct who saw and changed what.
Country-aware retention
Retention windows configured across 16 countries, with records surfaced for review once they pass their period.
Built for your profession
Notes, outcome measures and compliance tuned to how each discipline actually works.
Start free, upgrade only if you need to
The Free plan is free forever — one practitioner, 20 patients, no card. Paid plans are billed monthly or annually (two months free on annual).
Free
£0
Solo
£25/mo
Clinic
£49/mo
Practice
£119/mo
Enterprise
Custom
UK & EU data, GDPR by design
- All patient and clinical data stored in EU-region infrastructure — never shipped elsewhere.
- UK GDPR and EU GDPR compliant, with health treated as special-category data.
- Consent tracking, right-to-erasure, data export and a full audit log, built in from day one.
- Import your patient list by CSV from Cliniko, Jane, WriteUpp, Carepatron or Pabau.
GDPR-compliant clinic software: common questions
Where is my patients' data stored?
In EU-region infrastructure. It is not transferred outside the EU, and Atlacare complies with both UK GDPR and EU GDPR, treating health information as special-category data.
Does Atlacare help with subject access and erasure requests?
Yes. You can export all of one patient's data for a Subject Access Request in one click, and anonymise a record in response to a valid right-to-erasure request, subject to the retention rules that apply to clinical and financial records.
Do you use AI that sends patient data to third parties?
No. Atlacare uses no AI providers and sends no patient data to any AI service. There is no AI sub-processor on our list; if that ever changes we will add the provider before the feature ships.
Can I see who accessed a record?
Yes. Significant actions are audit-logged, and confidential notes are restricted to the treating practitioner and owner, so access is both limited and traceable.
Do I need to register with the ICO to use it?
Most UK clinics processing patient data need to register with the ICO regardless of software. Atlacare's help centre explains when registration applies; the software gives you the compliance tooling either way.
Compliance you can actually rely on
Start free and see GDPR handled properly from day one — no card required.
Start freeNo credit card · 20 patients free forever