Tandem Health

AI medical scribe and coding assistant built to EU medical-device standards

Nabla Copilot

AI medical scribe that turns patient conversations into clinical notes

Tandem Health

Excellent

25/25

Nabla Copilot

Excellent

22/25

Score Breakdown

DimensionTandem HealthNabla Copilot

Data Residency

Where is your data stored and processed?

Tandem Health: Patient data is processed and stored exclusively in European data centres, and audio is deleted immediately after transcription with no storage — an explicit EU-only posture.

Nabla Copilot: Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

5/5

Patient data is processed and stored exclusively in European data centres, and audio is deleted immediately after transcription with no storage — an explicit EU-only posture.

4/5

Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

Legal Jurisdiction

Which laws govern the company and your data?

Tandem Health: Incorporated as Tandem Health AB in Sweden with no US parent, placing it fully within EU/EEA jurisdiction.

Nabla Copilot: Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

5/5

Incorporated as Tandem Health AB in Sweden with no US parent, placing it fully within EU/EEA jurisdiction.

4/5

Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

Data Retention & Training

Is your data used for model training?

Tandem Health: States it does not train AI models on patient or personal data, deletes audio immediately after transcription, offers enterprise data agreements, and operates under an ISO 13485 medical-device QMS.

Nabla Copilot: Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

5/5

States it does not train AI models on patient or personal data, deletes audio immediately after transcription, offers enterprise data agreements, and operates under an ISO 13485 medical-device QMS.

5/5

Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Tandem Health: Exceptional stack: ISO 27001:2022, ISO 13485:2016, ISO 42001:2023, ISO 14001, NEN 7510, plus CE/MDR Class IIa and UKCA medical-device marks, NHS DSPT and Cyber Essentials Plus. No SOC 2 published, but sector-specific medical-device certification more than compensates.

Nabla Copilot: SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

5/5

Exceptional stack: ISO 27001:2022, ISO 13485:2016, ISO 42001:2023, ISO 14001, NEN 7510, plus CE/MDR Class IIa and UKCA medical-device marks, NHS DSPT and Cyber Essentials Plus. No SOC 2 published, but sector-specific medical-device certification more than compensates.

4/5

SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

Regulatory Fit

Suitability for regulated industries and professional services

Tandem Health: Purpose-built and CE/MDR-certified as a medical device for EU and UK clinical use, with named applicability to healthcare regulators (EMA, MHRA) and NHS frameworks.

Nabla Copilot: Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

5/5

Purpose-built and CE/MDR-certified as a medical device for EU and UK clinical use, with named applicability to healthcare regulators (EMA, MHRA) and NHS frameworks.

5/5

Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

Total Score

25/25

22/25

Best For

Tandem Health

Best for EU-headquartered organisations needing maximum data sovereignty; organisations requiring broad certification coverage (SOC 2 Type II, HIPAA BAA, HDS); regulated industries (HHS OCR, CNIL); privacy-conscious teams who need strong data retention controls.

Nabla Copilot

Best for EU-headquartered organisations needing maximum data sovereignty; organisations requiring broad certification coverage (CE mark (EU MDR), MDR Class IIa, UKCA); regulated industries (EMA, MHRA); privacy-conscious teams who need strong data retention controls; teams on a tight budget.

Detailed Comparison

Nabla Copilot vs Tandem Health: Trust & Compliance Comparison

Nabla Copilot (Nabla, FR) scores 22/25 overall with a Gold (Excellent) trust badge. AI medical scribe that turns patient conversations into clinical notes. Tandem Health (Tandem Health, SE) scores 25/25 with a Gold (Excellent) trust badge. AI medical scribe and coding assistant built to EU medical-device standards.

Dimension-by-Dimension Breakdown

#### Data Residency

Tandem Health leads with 5/5 vs 4/5.

●Nabla Copilot (4/5): Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.

●Tandem Health (5/5): Patient data is processed and stored exclusively in European data centres, and audio is deleted immediately after transcription with no storage — an explicit EU-only posture.

#### Legal Jurisdiction

Tandem Health leads with 5/5 vs 4/5.

●Nabla Copilot (4/5): Incorporated in France under French and EU law, benefiting from GDPR-native jurisdiction and the French Health Data Hosting (HDS) regulatory framework. US operations covered by HIPAA BAA.

●Tandem Health (5/5): Incorporated as Tandem Health AB in Sweden with no US parent, placing it fully within EU/EEA jurisdiction.

#### Data Retention & Training

Both score equally at 5/5.

●Nabla Copilot (5/5): Patient audio processed transiently and not stored by default. No use of patient data for model training. Configurable note retention aligned with EHR data governance policies.

●Tandem Health (5/5): States it does not train AI models on patient or personal data, deletes audio immediately after transcription, offers enterprise data agreements, and operates under an ISO 13485 medical-device QMS.

#### Certifications

Tandem Health leads with 5/5 vs 4/5.

●Nabla Copilot (4/5): SOC 2 Type II certified; HIPAA BAA available; HDS certified in France. ISO 27001 in progress. Strong healthcare-specific compliance posture for a company of its size.

●Tandem Health (5/5): Exceptional stack: ISO 27001:2022, ISO 13485:2016, ISO 42001:2023, ISO 14001, NEN 7510, plus CE/MDR Class IIa and UKCA medical-device marks, NHS DSPT and Cyber Essentials Plus. No SOC 2 published, but sector-specific medical-device certification more than compensates.

#### Regulatory Fit

Both score equally at 5/5.

●Nabla Copilot (5/5): Exceptional fit for healthcare providers. HIPAA BAA, HDS certification, GDPR-native jurisdiction, and no patient data training make it one of the most compliant AI scribing tools available.

●Tandem Health (5/5): Purpose-built and CE/MDR-certified as a medical device for EU and UK clinical use, with named applicability to healthcare regulators (EMA, MHRA) and NHS frameworks.

Certifications at a Glance

Certification	Nabla Copilot	Tandem Health
CE mark (EU MDR)	No	Yes
Cyber Essentials Plus	No	Yes
GDPR	No	Yes
HDS	Yes	No
HIPAA BAA	Yes	No
ISO 13485:2016	No	Yes
ISO 14001:2015	No	Yes
ISO 42001:2023	No	Yes
ISO/IEC 27001:2022	No	Yes
MDR Class IIa	No	Yes
NEN 7510	No	Yes
NHS DSPT	No	Yes
SOC 2 Type II	Yes	No
UKCA	No	Yes

Overall Verdict

Tandem Health has a clear trust advantage, scoring 25/25 compared to Nabla Copilot's 22/25. Tandem Health particularly excels in data residency, legal jurisdiction, certifications.

Frequently Asked Questions

Which is better for EU compliance, Tandem Health or Nabla Copilot?

Tandem Health has a TrustKit score of 25/25 while Nabla Copilot scores 22/25. Tandem Health currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Tandem Health and Nabla Copilot compare on data residency?

Tandem Health scores 5/5 for data residency (Patient data is processed and stored exclusively in European data centres, and audio is deleted immediately after transcription with no storage — an explicit EU-only posture.), while Nabla Copilot scores 4/5 (Choice of US (AWS us-east-1) or EU (AWS eu-west-1) data hosting. French HDS certification for health data in the EU. Strong dual-region residency for healthcare organisations on both sides of the Atlantic.).

Are Tandem Health and Nabla Copilot GDPR compliant?

Both tools are assessed across five compliance dimensions. Tandem Health has a regulatory fit score of 5/5 and Nabla Copilot scores 5/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool