Regulatory

Regulatory information

The professional and regulatory framework ToothAid operates within.

ToothAid's CQC registration

Toothaid Ltd is registered with the Care Quality Commission under the Health and Social Care Act 2008 for the regulated activity "Treatment of disease, disorder or injury".

  • Registered provider: Toothaid Ltd, 28 Cavendish Drive, Edgware, HA8 7NS
  • Provider ID: 1-18043045416
  • Location: ToothAid, 28 Cavendish Drive, Edgware, HA8 7NS (Location ID 1-19210567475)
  • Registered manager: Dr Benjamin A Pearlman (Manager ID CON1-18043045473)
  • Certificate number: CRT1-19607796443, dated 19 June 2024

ICO data protection registration

Toothaid Ltd is registered with the Information Commissioner's Office as a data controller under the Data Protection (Charges and Information) Regulations 2018.

  • Registered entity: Toothaid Ltd, 28 Cavendish Drive, Edgware, HA8 7NS
  • ICO registration reference: ZC235587
  • Date registered: 1 September 2026
  • Registration expires: 31 August 2027
  • Data protection officer: Junaid Patel (dpo@toothaid.co)

You can verify this entry on the ICO's public register at ico.org.uk.

Nominated roles

ToothAid is an online-first service with no clinical premises and no hands-on treatment. Our nominated roles are therefore proportionate to a remote model: clinical governance and data protection carry the most weight, while premises-based duties are limited to our registered office and any workspace our team uses.

RoleNamed personScope
Registered manager (CQC)Dr Benjamin A Pearlman (GDC 291062)Overall accountability for the regulated activity and clinical governance.
Safeguarding lead (children and adults at risk)Dr Benjamin A Pearlman (GDC 291062)Concerns raised during remote consultations, escalation to local authority safeguarding teams.
Data protection officer (DPO)Junaid Patel (dpo@toothaid.co)UK GDPR compliance, DPIAs, records of processing, subject access and breach reporting to the ICO.
Clinical governance leadAdam PatelSign-off of the symptom checker question set, routing rules and prompts; incident review and audit.
Health, safety and fire lead (office only)James PearlmanRegistered office and any workspace used by staff, plus display screen and homeworking assessments.
Emergency-preparedness leadJames PearlmanWhat clinicians do if a patient deteriorates mid-consultation, including escalation to 999 or NHS 111.

Because ToothAid does not carry out any physical procedures, infection prevention and control and first aid are handled as part of the emergency-preparedness and health and safety roles above rather than as standalone clinical functions. Where a patient is referred for face-to-face care, infection control, decontamination and resuscitation duties sit with the treating practice, which must be CQC registered and evidence its own compliance before it can receive ToothAid referrals.

Safeguarding

ToothAid's safeguarding lead is Benjamin Pearlman (GDC number 291062). If you have a concern about the safety or welfare of a child or vulnerable adult, or about a clinician's conduct, please contact us immediately at info@toothaid.co.

Dentists

Every ToothAid dentist is registered with the General Dental Council, holds professional indemnity insurance, and completes ToothAid's onboarding and vetting checks. Registration and insurance expiry dates are tracked and re-checked.

Practices

Participating practices are checked for CQC registration and the insurance and compliance information ToothAid requires before they can receive patient referrals.

Prescribing

Prescriptions are generated through Clynxx, a regulated prescribing service. ToothAid records the prescription reference and status; the regulated prescribing process itself takes place within Clynxx.

Clinical records and amendments

Consultation notes are written by the treating dentist during or immediately after the consultation. The record can be corrected for 48 hours after it is first created. After that it is locked: the original entry cannot be changed or deleted, and any correction or additional information is added as a separate, timestamped amendment attributed to the clinician who made it. Patients see both the original record and any amendments on their consultation report.

Scope of the service

ToothAid provides remote dental advice, triage and, where clinically appropriate, prescribing. It is not an emergency service and cannot deliver hands-on treatment; anything requiring physical care is referred to a participating practice or to NHS urgent dental care.

AI governance and the symptom checker

ToothAid's symptom checker uses artificial intelligence to produce a provisional, software-generated assessment from the answers a patient gives. It is not a diagnosis, it is not produced or reviewed by a dentist before the patient sees it, and it never prescribes. Every AI result is labelled as software-generated wherever it appears — on screen, in email, and in the clinical record — and clinicians are shown an explicit notice that the text is unverified and must be independently assessed.

  • Clinical safety floor: rule-based red-flag triage runs first and the AI can escalate urgency but can never reduce it. Emergency red flags bypass the AI entirely and show emergency guidance immediately.
  • Auditability: the question-set version, prompt version, model identifier and clinical review date are stored with every saved assessment, so any output can be reproduced and reviewed.
  • Clinical oversight: the question set, routing rules and AI prompt are reviewed and signed off by the registered manager, Dr Benjamin A Pearlman (GDC 291062), and re-reviewed whenever they change.
  • Incident monitoring: AI failures and patient "this does not look right" reports are logged and reviewed by ToothAid's clinical governance lead as part of routine quality monitoring.
  • No automated decision-making: the AI does not make decisions with legal or similarly significant effects (UK GDPR Article 22). Care decisions are made by a GDC-registered dentist during the consultation.
  • Data protection: symptom checker answers are special category health data processed under Article 9(2)(h). A Data Protection Impact Assessment covering the AI-assisted checker is held on file and reviewed annually. Answers are not used to train third-party models.

Complaints

Contact info@toothaid.co. We acknowledge complaints in writing within three working days and aim to respond fully within 20 working days; if a complaint is complex we will explain why and give you a revised date. These timescales match section 16 of our terms and conditions. If you are unhappy with the outcome you can escalate to the Dental Complaints Service (dcs.gdc-uk.org, 020 8253 0800), or to the General Dental Council where the concern is about a clinician's fitness to practise.

This page was last updated on 24 August 2026 and is reviewed at least once a year.