Skip to content
NHS

Deliver faster for patients and clinicians, with clinical safety and information governance kept in place.

Your digital teams deliver faster without loosening a single control. AI agents do the routine work of planning, building, testing, releasing and watching your systems, and every step lands in a record your clinical safety, information governance and audit teams can read.

For digital, engineering, platform, security and information governance teams at NHS trusts, integrated care boards, GP federations, NHS England and the health technology suppliers who build for them.

Why it slips today

Where the hours and the risk go.

10,104
Outpatient appointments postponed
After the cyber attack on the pathology provider Synnovis in June 2024, at King's College Hospital and Guy's and St Thomas', alongside 1,700 elective procedures.
6,912
Appointments cancelled by WannaCry
The National Audit Office found the 2017 attack affected at least 81 of 236 trusts and could have been prevented by basic IT security practice.
43 min
Saved per person per day
A Microsoft 365 Copilot trial across 90 NHS organisations and more than 30,000 staff found this average saving. AI is arriving fast.
Staff use AI tools nobody has approved, and code, prompts and logs go to outside AI services.
Hazard logs and safety cases are updated by hand, long after the change.
Evidence for the Data Security and Protection Toolkit is gathered by hand each year.
Changes are approved in one tool, built in another and deployed from a third.
Use cases

Clinical safety and governance, kept current as you build.

Hazard logs and safety cases drafted

Hazard log entries and safety case updates are drafted from every change to a clinical system, for your clinical safety officer to review and sign off under DCB0129 and DCB0160.

Evidence packs for your DSPT

Change, access and incident records are ready as evidence for the Toolkit outcomes they cover. An AI agent assembles the pack, and a person checks and signs it off.

Incident timelines for NIS reporting

Every incident keeps its severity, timeline, people and post-mortem in one record, so your incident manager starts from the facts when NIS reporting clocks are running.

Change records from ticket to release

Ticket, acceptance criteria, code review, clinical safety sign-off, approvals, build and release are linked, so anyone can follow a live change back to the request.

EPR and FHIR integration

Our engineers connect your electronic patient record, GP clinical systems and integration engine through their APIs and FHIR interfaces, where each supplier and NHS England's onboarding allow.

AI inside your boundary, not shadow AI

One AI workspace with AI models you run and approve, so staff get AI help without patient information leaving your cloud or data centre.

Every change reviewed twice

A reviewer AI agent on a different model checks each change against its acceptance criteria, and a person decides the merge.

Alerts turned into one issue card

Uptime, logs, metrics and traces become one card per problem that names the likely cause, beside the release that caused it and its rollback plan.

Builds from your approved libraries

Builds use mirrored copies of the open-source packages you approve, inside your boundary, and each update arrives as a reviewed change.

Before and after

The same week, with JuhJuh.

SituationAt 2:10am the feed that brings test results into the patient record stops.
Before

Alerts from separate monitoring tools wait for someone to correlate them, and the runbook is hard to find at that hour.

After

The SRE on-call AI agent opens the incident, finds the release behind it and sends the on-call engineer a voice note. She approves the rollback with one tap, and results flow again by 2:31am.

SituationA consultant asks for a change to the outpatient booking page.
Before

The change is built, then the hazard log is updated by hand long after it, and the safety evidence trails the release.

After

The spec AI agent writes the spec, the engineer AI agent builds it tests-first and the clinical safety AI agent drafts the hazard log update. The clinical safety officer signs it off the same day.

SituationInformation governance asks for this year's Toolkit change evidence.
Before

Someone spends days gathering approvals, releases and access records from several tools.

After

The assurance evidence AI agent assembles it from the record by 5pm, and the head of digital and engineering signs it off.

Who it is for

Every role gets time back.

Chief information officer and chief digital officerFaster delivery across every team, with one standard and one record.
Chief clinical information officerChanges to clinical systems built, tested and safety-checked the same way every time.
Chief information security officerAI kept inside your boundary unless your rules allow a public model, with a record of every action.
Clinical safety officerHazard log and safety evidence updates drafted from every change, ready for your sign-off.
Caldicott guardian and senior information risk ownerPatient data kept in your installation, access by role and a record of who did what.
Head of digital and engineeringEvery change built to the same standard, whoever or whatever wrote it.
Platform and site reliability engineersPipelines, releases, alerts and on-call in one place, with the routine work done for you.
Software engineers and integration specialistsTickets turned into reviewed, tested changes, with your time spent on design and judgement.
Health technology suppliersThe evidence your NHS customers ask for, produced as you build.
Control and where it runs

A person approves anything consequential.

What your AI agents never do on their own

  • Merge a change or approve their own work. A different AI agent reviews it, and a person decides.
  • Make a clinical safety decision or sign off a safety case. That stays with your clinical safety officer.
  • Deploy to live systems or roll back without a person's approval.
  • Decide whether to report an incident. Your incident manager and senior information risk owner decide.
  • Use an AI model your rules haven't approved, or reach data the person behind them can't see.
  • Send anything outside the organisation beyond the answers you've approved in advance.

Self-hosted inside your trust's boundary

JuhJuh runs as your own installation in your own cloud account or your own data centre, connected or fully air-gapped. Open-weight models from the Mistral, DeepSeek, GLM and Kimi families run inside it, and public families such as Claude, GPT and Gemini are added only where your rules allow.

Patient information, code and know-how stay inside that boundary unless you connect an outside service, approve a website for your AI agents or approve sending something out. Our engineers install it with you and stay to build your services, processes and systems into it.

Start with one or two teams.

Talk to us about your organisation, and add the rest of your teams when you're ready. That's the juju.

JuhJuh uses cookies

We use essential cookies to run the site, and optional analytics cookies to count visitors. We set no advertising or marketing cookies. Only essential cookies are turned on by default. Cookie Policy

Essential

Required for the site to function

Analytics

A first-party visitor ID, so we can count returning visitors. Not shared with anyone.