Security & Technology
Pharmacy clinical software built to the UK’s most rigorous security and data-protection standards — ISO 27001, Cyber Essentials Plus, and NHS DSP Toolkit “Standards Exceeded”.
Last updated: 6 August 2026
Certifications & Compliance
Independently audited and verified to the highest standards
ISO 27001
CertifiedInternational standard for information security management systems. Independently audited to ensure data is handled with the highest level of security.
Cyber Essentials Plus
CertifiedUK Government-backed certification for cyber security. Independently audited with external technical assessment of our systems.
View certificateNHS Data Security & Protection Toolkit
Standards ExceededCompleted the NHS Data Security and Protection Toolkit (2025-26) at "Standards Exceeded" — the highest grading, above the required "Standards Met". Annual self-assessment against the National Data Guardian's ten data security standards, confirming NHS patient data is handled correctly.
View DSP Toolkit statusMHRA Registered
RegisteredRegistered with the Medicines and Healthcare products Regulatory Agency as a medical device manufacturer. Our AI Scribe meets the required safety standards for clinical use.
View registrationICO Registered
ZB722243Registered with the Information Commissioner's Office for data protection. Your patient data is handled in full compliance with UK data protection law.
View ICO entryGDPR Compliant
CompliantFull compliance with the UK General Data Protection Regulation and the Data Protection Act 2018. Data processing agreements, privacy impact assessments, and data subject rights fully implemented.
View privacy policyRQIA Registered Independent Medical Agency
PN011402Registered with the Regulation and Quality Improvement Authority for Northern Ireland. Meeting the required standards for health and social care services.
View RQIA entryInfrastructure
Enterprise-grade cloud infrastructure built for healthcare
Azure Infrastructure
Hosted on Microsoft Azure with UK and EU data centres. Azure App Service for the platform, Azure Database for PostgreSQL for clinical data, and Azure DevOps for secure CI/CD. Clinical records are stored to the HL7 FHIR R4 (UK Core) standard in Azure Health Data Services. Auto-scaling, redundancy, and 99.9% uptime SLA.
Encryption
All data encrypted at rest and in transit. AES-256 encryption for stored data, TLS 1.3 for all connections.
Access Control
Role-based access control with multi-factor authentication. Full audit trail of every action taken in the platform.
Backup & Recovery
Automated daily backups with point-in-time recovery. Disaster recovery plan tested regularly.
How we protect your data
Data Processing Agreements
Full DPAs in place with all sub-processors. We are transparent about who handles your data and how.
Regular Penetration Testing
Independent third-party penetration testing conducted regularly. Vulnerabilities identified and remediated before they become risks.
Incident Response Plan
Documented and tested incident response procedures. In the unlikely event of a breach, we have a clear, rapid response protocol.
Staff Security Training
All staff complete regular security awareness training. We cultivate a security-first culture across the entire organisation.
Data Minimisation
We only collect and process the data necessary for the service. No selling of data, no third-party advertising, no exceptions.
Questions about security?
We're happy to walk you through our security measures and compliance in detail.