healthtechai-mvp

How SpeedMVPs Built an AI Clinical Notes Summarisation MVP: Healthtech AI-MVP Case Study

Clinical documentation is one of the largest drains on clinician time in both NHS and private practice settings. GPs, hospital doctors, and allied health professionals spend an average of two hours per working day on administrative documentation, a figure that contributes significantly to burnout rates and reduces the time available for direct patient care. An AI clinical notes summarisation tool that converts consultation recordings or raw clinician dictation into structured SOAP notes, discharge summaries, or referral letters can return meaningful time to clinical staff. SpeedMVPs built an AI clinical notes summarisation MVP for a digital health client using Next.js, Supabase, OpenAI GPT-4o, Vercel, and AWS S3. The product accepts audio uploads or text input, produces structured clinical note output in configurable formats, and is built with NHS Digital DTAC requirements and GDPR health data obligations in mind. Delivered in under three weeks at a fixed price from GBP 8,000, with full code ownership transferred. Audio recordings of medical consultations are special category health data under UK GDPR, which means the storage, processing, and retention obligations are significantly stricter than for standard personal data. Founders who do not address this from the first line of code create compliance debt that can block NHS procurement and ICO registration. SpeedMVPs has delivered clinical notes MVPs for GP groups and private clinic chains in the UK, with DTAC-relevant documentation, automated audio deletion policies, and HL7 FHIR export included as standard deliverables.

Tech Stack

Next.jsSupabaseOpenAI GPT-4oVercelAWS S3

Project Overview and Business Context

The client was a GP surgery chain looking to reduce the documentation burden on their clinical staff. The existing process required GPs to either dictate notes for a medical secretary to type up (slow, expensive, and creating a backlog) or type notes directly into their clinical system during or after each consultation (reducing consultation quality and extending working hours). The brief was to build an AI tool that a GP could use at the end of each consultation: upload a 3-5 minute voice recording or paste raw dictation text, and receive a structured SOAP note (Subjective, Objective, Assessment, Plan) ready for review and one-click import into their clinical system. The tool also needed to support referral letter drafting from the structured note, reducing the time spent on secondary documentation. Data sensitivity requirements were significant. Audio recordings of medical consultations contain special category health data under UK GDPR and must be handled with appropriate technical and organisational measures. The MHRA's position on AI-assisted clinical documentation tools is that they may constitute medical devices if they inform clinical decision-making rather than purely assisting with administrative transcription. The client's legal advisors classified the tool as administrative assistance, with the GP making all clinical judgments independently of the AI output. NHS Digital DTAC (Digital Technology Assessment Criteria) compliance was a requirement for deployment in NHS-adjacent settings.

Technical Architecture and Stack Decisions

The application is built on Next.js deployed on Vercel, with Supabase handling authentication, user management, and structured data storage. Audio file uploads go to AWS S3 with server-side encryption (AES-256) and are stored in an EU-region bucket to satisfy UK GDPR data residency requirements. Audio is never stored longer than 24 hours after transcription is complete, with automated S3 lifecycle policies enforcing deletion. The transcription pipeline uses OpenAI Whisper for audio-to-text conversion, chosen for its accuracy on medical terminology and its support for UK English accent profiles. Transcription output is passed directly to GPT-4o via a server-side API route, never exposed to the client-side browser. GPT-4o produces structured SOAP note output as a JSON object with separate fields for each SOAP section, which the Next.js frontend renders in an editable form. The GP reviews, edits, and approves the note before it enters any downstream system. The HL7 FHIR compatibility requirement was addressed by building an export layer that maps the structured SOAP JSON fields to FHIR R4 Clinical Note resource format, allowing integration with clinical systems that support FHIR. Supabase stores completed notes (post-clinician approval) with audit timestamps and user ID. Raw transcription text is not persisted after note generation. PostHog is excluded from this build due to the sensitivity of health data. A minimal internal logging table in Supabase tracks usage metrics (notes generated, average review time) without capturing clinical content.

Key AI and ML Components

Two AI components work in sequence. OpenAI Whisper handles transcription. The model is called server-side via the OpenAI API with the medical transcription prompt configuration enabled, which improves accuracy on drug names, anatomical terms, and clinical abbreviations. Whisper's output is a raw transcript with punctuation but no clinical structure. GPT-4o then receives this transcript with a system prompt that instructs it to extract and structure the content into SOAP format. The system prompt includes specific instructions for each SOAP section: Subjective (patient's reported symptoms, history, presenting complaint in the patient's own words), Objective (examination findings, vital signs, observations, results referenced in the consultation), Assessment (clinical impression, differential considerations), and Plan (medications prescribed, investigations ordered, referrals, follow-up timing, safety netting advice given). The prompt is parameterised by consultation type, so the template for a GP routine appointment differs from a hospital outpatient follow-up or an A&E presentation. Output is always a structured JSON object, never free text, which means the rendering and editing layer has full control over formatting and can validate field completeness before the note is submitted.

Challenges Solved and How

Medical audio transcription has specific accuracy challenges. Background noise in consultation rooms, overlapping speech between clinician and patient, and domain-specific terminology all reduce transcription accuracy. The system handles this with a pre-processing step that strips long silences and normalises audio levels before passing to Whisper, and a post-processing step that applies a medical terminology dictionary to catch common Whisper errors on drug names and anatomical terms. Structuring free-form consultation content into SOAP format is harder than it appears. Real consultations are non-linear: a patient mentions a concern, the GP asks a follow-up question, a medication is discussed, and then the original concern resurfaces. GPT-4o is instructed to identify and consolidate thematically related content across the full transcript rather than treating it as a linear sequence, producing SOAP notes that reflect the clinical logic of the consultation rather than the conversational order. DTAC compliance required a data flow diagram showing all processing steps, data categories, retention periods, and access controls. SpeedMVPs produced this as part of the build documentation, covering audio storage, transcription processing, note storage, and user access management.

Outcome and Measurable Results

The client ran a four-week pilot with six GPs across two surgeries. Average note completion time fell from 8 minutes (manual typing) to 2.5 minutes (AI draft plus review), a 69% reduction. Participating GPs rated 87% of AI-generated SOAP notes as requiring minimal edits (changing fewer than 10% of the content). The referral letter drafting feature reduced letter preparation time from an average of 12 minutes to 4 minutes. Over the four-week pilot, the six participating GPs collectively recovered an estimated 18 hours of administrative time per week. Qualitative feedback highlighted that the quality of SOAP notes improved as well as the speed: GPs reported that the structured format prompted them to review all four SOAP sections and caught instances where they had not documented safety netting advice given verbally in the consultation.

Lessons for Similar Projects

Invest in the system prompt per consultation type. A generic SOAP prompt works reasonably well for standard GP appointments but fails on specialist consultations with different documentation conventions. Build parameterisation into the prompt architecture from the start so templates can be extended without changing the core system. Do not persist audio longer than necessary. Health data regulation in the UK, including NHS DSP Toolkit requirements and UK GDPR, imposes strict obligations on special category data. Automated deletion of raw audio after transcription reduces your data processing footprint and simplifies your compliance documentation significantly. Make the editing interface the priority. GPs adopt tools that feel fast and trustworthy. If reviewing and editing the AI output takes longer than typing the note manually, adoption fails. Invest in the editing UX, including keyboard shortcuts, field-by-field navigation, and one-click acceptance of unchanged sections. Finally, involve a clinical informatics lead from the NHS trust or practice in the FHIR mapping design. FHIR implementation details vary between clinical systems, and getting the mapping wrong creates import failures that damage trust in the product.

Frequently Asked Questions

Is an AI clinical note summarisation tool classified as a medical device by the MHRA?+

The MHRA's position is that software intended to aid clinical decision-making may qualify as a medical device under UK MDR 2002. An AI tool that purely assists with administrative transcription and structuring of a clinician's own notes, where all clinical judgments are made independently by the clinician, is generally positioned as administrative software rather than a medical device. SpeedMVPs builds the product with this distinction embedded in the product design and user interface, and recommends clients seek specific MHRA regulatory guidance before commercial launch.

How is audio data from medical consultations handled under UK GDPR?+

Audio recordings of medical consultations are special category health data under UK GDPR. SpeedMVPs stores audio in EU-region AWS S3 with AES-256 server-side encryption. Automated S3 lifecycle policies delete audio files within 24 hours of transcription completion. Raw transcription text is not persisted. Only the clinician-approved structured note is stored. A GDPR data processing record is provided as part of the build documentation, covering lawful basis, data categories, retention periods, and access controls.

Can the tool integrate with existing clinical systems like EMIS or SystmOne?+

The MVP exports structured notes in HL7 FHIR R4 format, which is the interoperability standard supported by NHS-connected clinical systems. Direct integration with EMIS or SystmOne requires vendor API access and their integration approval processes, which are separate projects from the MVP build. SpeedMVPs builds the FHIR export layer so that integration can be added as a next phase without rearchitecting the note storage model.

What languages and accents does the transcription support?+

OpenAI Whisper supports UK English and performs well on a range of regional accents. Medical terminology accuracy is improved by the pre-processing pipeline and post-processing dictionary. For multilingual consultations or non-English language support, Whisper supports over 90 languages, and the system prompt can be adapted for non-English SOAP note output. Performance varies by language and should be tested against representative audio samples before deployment.

Does the tool need NHS Digital DTAC approval?+

DTAC (Digital Technology Assessment Criteria) is the NHS England framework for assessing digital health tools deployed in NHS settings. Tools that process patient data in NHS contexts are expected to meet DTAC standards covering clinical safety, data protection, technical security, interoperability, and usability. SpeedMVPs produces DTAC-relevant documentation as part of the build, including data flow diagrams, security controls, and clinical safety considerations. Full DTAC submission is the client's responsibility and requires clinical safety officer review.

Building something similar? Get a free consultation at speedmvps.co.uk

Get a Free Quote