Health-sector digital assurance
For organisations that build, buy, or run digital health and AI. Two competencies sit at the core, information security and information governance, and clinical safety, plus cross-sector AI governance that applies in health and beyond. We help suppliers get ready for the NHS, and give buyers independent assurance when a decision has to stand up to scrutiny.
Not sure where you sit? See for suppliers or for buyers.
Information Security & IG
DSPT Support & Completion
A defensible DSPT submission through gap assessment, CAF-aware advisory and quality assurance.
Standard: single site, simple evidence base. Complex: multiple systems or sites.
ISO/IEC 27001 Implementation Advisory and QA
A certification-ready ISMS on an advisory-and-QA basis, owned and populated by your team under our direction.
Standard: SME with a single ISMS scope. Complex: multiple scopes or a larger organisation.
NHS Data Security & Risk Assurance Review
A board-level, independent opinion on whether an organisation is genuinely safe to access NHS data.
Set by scope, evidence volume and organisational complexity. Fee confirmed in the quotation after written scoping.
ISO/IEC 27001 Control Reality Assessment
An independent check of whether documented ISO 27001 controls are meaningful in practice.
Set by the number of controls in scope and the sampling depth. Fee confirmed in the quotation after written scoping.
Pre-Procurement & Pre-Data Access Risk Assessment
A fast, independent risk opinion before you procure a system or grant a supplier access to data.
Set by the sensitivity of the data and the complexity of the supplier or system. Fee confirmed in the quotation after written scoping.
Clinical Safety
Clinical Safety Officer (DCB0129 / DCB0160) as a Service
Your named Clinical Safety Officer under DCB0129/0160, held by a registered clinician.
Set by the number of products and the ongoing oversight required.
DTAC Readiness
A completed, buyer-ready DTAC submission for NHS procurement, with the clinical safety domain produced by us.
Fixed-scope readiness package.
Clinical Risk & DCB0129 Supplier Assurance
An independent, clinically-informed check of a supplier clinical risk management file before you deploy.
Set by product complexity and clinical risk profile. Fee confirmed in the quotation after written scoping.
AI Governance
AI Management System Implementation (ISO/IEC 42001)
An ISO/IEC 42001 AI management system, integrated with your ISO 27001 controls.
Set by organisation size and the number and complexity of AI systems in scope.
AI & Emerging Technology Governance Assessment
An independent assessment of whether your AI deployment risk is acceptable and defensible.
Set by the number of AI systems, their risk tier and regulatory exposure. Fee confirmed in the quotation after written scoping.
All prices exclude VAT. Work outside the stated scope is quoted separately.