Security & compliance
Security, information governance and clinical safety
Honest status, not unqualified badges.
Because this is a clinical-safety and data-protection product, we publish only what we hold today and show honest, dated status for the rest. Regulators register pharmacies and pharmacists, not our software.
Clinical safety
Clinical risk management: DCB0129 and DCB0160.
DCB0129 (manufacturer)
We are establishing DCB0129 clinical risk management as the software manufacturer: a named Clinical Safety Officer, a hazard log and a clinical safety case. This work is in progress.
DCB0160 (your deployment)
We support your organisation with its DCB0160 deployment clinical risk management; we do not claim it for you.
Data protection
Where your patients’ data lives, and how it’s handled.
UK GDPR and DPA
Designed for UK GDPR and the Data Protection Act, with controller vs processor set out per service mode. ICO registration is in progress.
Data minimisation
Only what is needed is stored, and patient data is kept out of logs and analytics.
UK residency and encryption
Built for UK data residency: records and any recordings held in the UK, encrypted in transit and at rest.
Access, audit and clinicians
Least privilege, fully audited.
Access and audit
Role-based access, mandatory MFA, no shared logins, and append-only hash-chained audit logging of every access and state change.
Recording
Consent-gated, policy-driven and off by default; signed-URL access only; retention-controlled.
Our clinicians
Consultations are delivered by GPhC-registered, appropriately indemnified pharmacists, aligned to the GPhC February 2025 guidance for services provided at a distance.
Safe prescribing
A documented convert-to-face-to-face protocol and a pathway-by-pathway remote-suitability matrix.
Talk to us about your IG sign-off
We’ll walk your superintendent or IG lead through the detail and share our documentation.