1Open Where data goesSecurity Centre → Where data goes → Patient data in outgoing requests. Changing it needs ai.configure.
2Choose off, redacted or fullOff sends nothing. Redacted removes the identifiers — the name becomes a role word, the date of birth an age, the hospital number, phone and email go — but clinical text is still sent. Full sends the excerpts as written. New practices start on redacted.
3Know what Off switches offAudio has no redacted form. With Off, the consult room keeps recordings without transcribing them, and spoken requests are refused.
4Read who receives whatThe same tab lists each outside service and what it receives.