Accreditations

Independent certifications and recognised standards that show how we protect information, manage quality and clinical safety, and run our organisation responsibly.

Overview

Health and care organisations trust us with patient information and with services their patients rely on. These accreditations are how we show, independently, that the trust is well placed.

Information security

ISO/IEC 27001, Cyber Essentials Plus, Software Security Code of Practice

Quality

ISO 9001

NHS assurance

Data Security and Protection Toolkit (standards exceeded every year since 2018-19), DCB0129 and DCB0160 clinical safety

Organisation

GreenMark, Daisy Mark (Dignity in Care)

ISO/IEC 27001

ISO/IEC 27001 is the international standard for information security management. Our Information Security Management System (ISMS) is certified to ISO/IEC 27001 by Alcumus ISOQAR and covers every part of our service: how we assess and manage risk, control access to information, respond to incidents and keep our policies and staff training up to date.

ISO 9001

ISO 9001 is the international standard for quality management. Our quality management system is certified to ISO 9001 by Alcumus ISOQAR, so our processes are documented, controlled and regularly reviewed: we deliver a consistent service, learn from what goes wrong and keep improving.

Cyber Essentials Plus

Cyber Essentials is the UK Government-backed scheme setting out the controls that protect organisations against the most common cyber attacks. We hold Cyber Essentials and Cyber Essentials Plus, for which our systems are tested by an independent assessor rather than only self-assessed.

Data Security and Protection Toolkit

The NHS Data Security and Protection Toolkit (DSPT) is the annual assessment that every organisation with access to NHS patient data and systems must complete, measuring its performance against the National Data Guardian's data security standards.

We have exceeded the standards in every assessment we have published, from 2018-19 to 2025-26, most recently in May 2026. Our assessments are published under our organisation code 8J025.

Clinical safety: DCB0129 and DCB0160

DCB0129 is the NHS standard for clinical risk management in the development of health IT systems, and DCB0160 covers how they are deployed and used. We build clinical risk management into our development, assessing the clinical hazards of each change and the controls for them, and we support the organisations that use our services to meet DCB0160.

Software Security Code of Practice

The UK Government's Software Security Code of Practice sets out how software suppliers should design, build, maintain and support secure software, and how they should communicate with their customers about security. We follow the code in how we develop and run our services.

GreenMark

GreenMark is a sustainability certification from Bellrock that helps organisations reduce their environmental impact through a fully documented environmental management system. It covers the local environment, utilities, waste, travel and procurement, and every action is checked and verified by the GreenMark team before certification.

Our GreenMark certification reflects our commitment to cutting energy use and waste, running our services on shared cloud infrastructure, and following a credible path to net zero.

Daisy Mark: Dignity in Care

The Daisy Mark is Manchester's Dignity in Care accreditation, awarded by Manchester City Council with the daisy as its emblem. It is a quality standard for fostering respect, independence and choice for people receiving health and social care, based on the Social Care Institute for Excellence's 10 Point Dignity Challenge. Services earn it through rigorous external assessment showing that dignity and respect are part of everyday care.

For us it reflects how we design our services around patients: treating them with respect, giving them clear choices and helping them reach the right care first time.

G-Cloud supplier

We are a supplier on the Crown Commercial Service G-Cloud 15 framework, so public sector organisations can buy our services through a compliant, pre-agreed route.