NHS compliance, built into the platform
CareFocusIQ is engineered around the standards NHS Digital and the CQC expect. The core technical foundations are already live on the platform — and our formal accreditations are on a clear, structured roadmap.
Honest by design: we tell you exactly what is implemented today and what is still in progress.
6 foundations
Core NHS technical standards implemented and running on the platform.
Accreditations
DSPT submission, Cyber Essentials, DTAC and clinical safety case on a structured roadmap.
DSPT & HIPAA aware
A live data-security posture engine tracks controls against NHS and US frameworks.
CareFocusIQ is on a structured NHS-readiness path. It is not a substitute for a provider’s own registration and governance, and we do not claim accreditations we do not yet hold. The status below reflects our internal NHS compliance tracker.
The six NHS foundations, already built
These are not promises — each one is implemented and running in CareFocusIQ today, mapped to the NHS Digital standard it satisfies.
Immutable clinical audit log
DCB0129 · DSPT evidenceEvery clinical action is written to a tamper-evident, hash-chained audit trail — the record NHS clinical-safety and data-security assessments expect, ready for inspection.
Reasonable Adjustment Digital Flag
DAPB4019A structured record of each person’s reasonable adjustments and how to meet them — built ahead of the 30 September 2026 mandatory NHS deadline.
SNOMED CT clinical coding
SNOMED CT · dm+d · ICD-10Conditions, medicines and interventions are captured against the NHS-mandated clinical terminologies, so records are coded, comparable and interoperable.
ODS organisation identity
NHS ODSEach organisation carries its Organisation Data Service code, the identifier the NHS uses to recognise a provider across national systems.
Accessible Information Standard
DCB1605 (AIS)Communication and information needs are recorded, flagged and shared through their full lifecycle — identify, record, flag, share and meet — as the standard requires.
FHIR R4 interoperability
HL7 FHIR R4A read-only FHIR R4 export and public API expose records in the NHS interoperability standard, ready to connect with wider health and care systems.
Accreditations in progress
These are the formal, process-based accreditations we are working through. We show them openly rather than overstate our position — the technical groundwork for each is already laid.
Data Security & Protection Toolkit (DSPT v8)
Annual NHS data-security self-assessment. Our technical controls are in place; formal submission is on the roadmap.
Cyber Essentials
Government-backed cyber-security certification, being pursued as part of our assurance programme.
DTAC assessment pack
The Digital Technology Assessment Criteria pack NHS buyers use to evaluate clinical safety, data protection, security and usability.
DCB0129 clinical safety case
Formal clinical-risk documentation and safety case, building on the immutable audit logging already live.
Independent penetration testing
Third-party security testing and UK GDPR sign-off to complete the external assurance picture.
A single, auditable framework
CareFocusIQ is designed against the NHS Digital and wider care standards below, tracked in one internal compliance register.
Want the full compliance picture?
We’ll walk your team through exactly what is live, what is on the roadmap, and how CareFocusIQ maps to your NHS and CQC obligations — with the evidence to back it up.