Therasize Limited

Therasize is a cloud-based web platform that supports practitioners in delivering structured psychological therapy (principally CBT) to their clients — sharing therapeutic resources, setting and reviewing homework, administering psychometric assessments, secure messaging, and video sessions. It supports, rather than replaces, the therapy pathway.

No. Therasize is not classified as Software as a Medical Device (SaMD) or AI as a Medical Device under the UK Medical Devices Regulations 2002. It does not diagnose, treat, monitor or provide clinical decision support; clinical judgement remains with the practitioner.

Minimal by design. Clients are identified by email address only (no name, no date of birth, no NHS Number). Special-category (health) data includes assessment responses, homework/worksheet content, and message content created during therapy.

All core personal data is stored and processed within the UK/EEA on managed cloud infrastructure (Google Cloud / Firebase — Firestore, Cloud Storage and Cloud Functions in EU regions).

Core data stays in the EEA (covered by UK adequacy). Where a sub-processor is US-headquartered, EU data residency is used and transfers are covered by the EU-US Data Privacy Framework (UK Extension) and/or the UK IDTA/SCCs.