The five RUAIH focus areas, explained
The certification’s announcement organises everything under five standards areas. Each has a dedicated page covering its controls and evidence; this page is the map.
Area 1 — Governance. The accountable structure: policy, committee, the AI inventory, board reporting, resourcing. Five of the fifteen controls live here, which tells you where the certification’s centre of gravity is.
Area 2 — Effective data management. What data AI systems touch and under what discipline: minimum-necessary use, access control, audit logging.
Area 3 — Risk and bias reduction. Classifying AI by potential harm at intake, examining equity on your own population, and holding vendors to written answers.
Area 4 — Monitoring, evaluating and validating. The operational heart: local validation before deployment, performance watched against named thresholds after it, and a route for AI safety events. Home of the evidence that only accumulates.
Area 5 — Transparency, education and training. What patients are told and what the workforce is taught, both recorded.
The readiness score grades an organisation across all five in about eight minutes and identifies the weakest — which is, reliably, more useful than the average.
Asked alongside this
Which focus area should we start with?
Area 1 — its inventory and committee are what every other area's controls reference. After that, area 4's monitoring clocks, because that history cannot be backdated.
Are the five areas weighted equally?
No weighting has been published. The prudent reading is that an assessor will expect evidence in all five, and gaps concentrate wherever record-keeping (not intention) is weakest.
← All RUAIH questions, areas and terms · The complete healthcare AI governance guide · Score your readiness