Lalu

Lalu: consented health data exchange for healthcare and business

Lalu is a health data platform that links healthcare providers, businesses and consumers around the consented flow of curated medical information. The company, which previously operated as Medi2data, describes its rebranding as the next phase of its growth strategy rather than a simple name change. Its activity dates back to 2017, when it began helping organisations access and use medical data more effectively.

The platform combines technology, governance and clinical expertise to turn unstructured medical records and reports into structured, usable data. Lalu presents this as a way to support decision-making, innovation and patient outcomes across the organisations it serves.

Three service portals for distinct audiences

Lalu organises its offer through three portals, each aimed at a different type of user:

• Lalu Care — aimed at healthcare, with tools for modern practices. It includes ReportSure in both a managed service and a self-service format.
• Lalu Hub — aimed at businesses seeking access to curated health data. Its listed components are Access Intelligence and Engage.
• Lalu Me — aimed at consumers who want to engage with their own health data.

The company also refers to Lalu Tracker as part of its site structure, alongside information about the team and news.

What curated health data means at Lalu

The company defines curated health data as medical information that has been securely collected, reviewed, organised and structured to improve accuracy, usability and decision-making. Its process streamlines the collection and processing of medical records and reports, transforming unstructured information into structured data that can be used efficiently and securely. Lalu states that this work is supported by clinical expertise as well as technology and governance.

Security, governance and certifications

Lalu presents security and regulatory compliance as central to its activity. The company lists the following credentials and approvals:

• Listing in the NHS England GP IT Futures (GPITF) catalogue, as a solution supporting GP practices.
• Certification with the NHS Digital Data Security and Protection Toolkit.
• ISO/IEC 27001:2022 certification, identified as IS 744869.
• ICO registration ZA353121, confirming compliance with UK data privacy regulations.
• Cyber Essentials and Cyber Essentials Plus certifications, confirming UK cybersecurity standards.
• Approved integration partner status across the three UK GP clinical systems, after completing their respective technical, security and governance assurance processes.

According to Lalu, these measures are combined with patient consent management and strict regulatory compliance to ensure health data is handled safely and responsibly.

Support and sales contact

Lalu states that its team aims to respond to emails within 24 hours. Prospective clients can request a demonstration or discuss requirements through the sales team, while existing clients can reach support or their designated account manager. The company also works with partners, though the site does not name them individually.

Offices in Cardiff, London and Cape Town

Lalu operates from three locations. The registered office of Medidata Exchange Limited, the company behind the Lalu trading name, is at Ty Derw, Lime Tree Court, Cardiff Gate Business Park, Cardiff CF23 8AB. The company also lists an office at The Maltings, East Tyndall Street, Cardiff CF24 5EA, and a London office at 21 Grosvenor Gardens, Victoria, London SW1W 0BD. Outside the UK, it has a presence in Cape Town at Ground Floor, Block W, Greenford Office Estate, Punters Way, Kenilworth, 7708, South Africa.