Safety & Privacy

Boundaries, governance and how your data flows

RoadWell is designed so individual health readings stay controlled, and so the product’s limits are clear.

Product boundaries

The current RoadWell service is limited to logging, reminders, record-keeping and general information. RoadWell does not diagnose, treat or determine fitness to drive.
  • RoadWell records a reading and shows relevant monitoring guidance — it does not make a fitness-to-drive determination.
  • Reminders apply where appropriate to the driver’s treatment, licence category (Group 1 / Group 2) and applicable guidance.
  • Predictive and personalised capabilities are research-stage and are not offered as clinical decision tools.

Clinical governance

Where human support is included in the service, it operates within a defined scope, with an escalation route to a suitably qualified clinician for anything requiring clinical judgement. RoadWell does not adjust medication, does not make licensing decisions, and does not replace a driver’s own healthcare team or DVLA responsibilities.

Data architecture

Individual driver health readings are not designed to be exposed to fleet operators through the fleet dashboard. Operator reporting is aggregated and subject to minimum-group and privacy controls.

Individual readings stay in the driver’s own record; operators see aggregated information only. Research use is de-identified.

Data protection at a glance

  • Data controller: SR ROAD WELL AI LTD, trading as RoadWell.
  • Special-category health data, processed on the basis of explicit consent where relied upon.
  • Purpose limitation & data minimisation — only what’s needed for the service and consented research.
  • Access & deletion rights — drivers can export or delete their data.
  • Security controls — encryption in transit and at rest, role-based access, and audit logging.
  • EU data residency and controlled international transfers.

The full, formal wording — including lawful basis, retention, sub-processors, international transfers, incident management and how to contact us about privacy — is in our privacy notice.