Mapped across other frameworks
Use intelligent automation and AI to avoid duplication of work, easily meeting NHS DSPT, Cyber Essentials, GDPR, NHS DTAC and ISO 27001 requirements - all at once.
Meet every requirement for
NHS DSPT
Assuric gives you the registers, controls and drafted answers to complete your NHS DSPT, all in one place.
- Automated compliance tracking, mapping DSPT to GDPR, Cyber Essentials and NHS DTAC
- Device management and penetration testing
- Built-in Record of Processing Activities, Information Asset Register and risk register
- AI questionnaire assistant to help you fill in the DSPT questionnaire
Trusted by teamsdeployed in the NHS
Features
Everything you need for
NHS DSPT
Automated compliance tracking
Automated compliance tracking
Easily fill any gaps, automate tasks, track compliance, and receive proactive alerts - ensuring requirements are met in record time.
DPIA, RoPA & risk management
Create a Record of Processing Activities and Information Asset Register
Understand where your data is held and log this in your Information Asset Register. Document your processing activities and record this in your Record of Processing Activities.
Staff portal & training
Training and Staff Compliance
All the necessary staff training you'll need (both basic and specialist), combined with automated tracking and reminders to ensure compliance.
Penetration testing
Penetration Testing
Our expert partners identify vulnerabilities with CREST-accredited security assessments. Receive a report to build trust with users and actionable remediation advice to improve product security.
Benefits
Turn hours of DSPT admin into minutes
Your RoPA and asset register, already in place
Your Record of Processing Activities, Information Asset Register and risk register are built into the platform, so the evidence DSPT asks for is already in one place.
Built-in auditor portal
Generate comprehensive risk reports for leadership teams and external auditors, simplifying audit preparation and execution. We work with expert DPOs and healthtech trained auditors who can perform external audits, as needed for large IT suppliers.
Ask Assuric DSPT Questionnaire Assistant
Our AI questionnaire assistant uses the information already in your workspace to draft answers for you, with citations showing exactly where each answer came from, so you can quickly review and submit with confidence.
Frameworks
Mapped to other frameworks
Overlapping requirements and evidence are mapped across frameworks automatically, so you never do the same work twice.
What our customers say
“We couldn't speak highly enough of both the Assuric team and the platform itself, which is incredibly easy to use, and with the skill and hardworking nature of the Assuric team. They've been a key component in accelerating our progress and deployments!”
Maks Kozarzewski
COO, VitVio
“The Assuric platform is a game changer in the clinical risk management field. It has been carefully designed to make the job of a CSO significantly more streamlined. The team are excellent and responsive to any product suggestions I have requested, and it has been a pleasure to work with them.”
Paul Llewellyn
CCIO, Accenture
“Assuric has been fantastic in helping us quickly and safely navigate regulatory compliance in the UK. From completing Cybersecurity requirements to DSPT, DCB0129, and DTAC, the team was supportive, extremely knowledgeable, and the platform made everything quick and straightforward. A separate regulatory company we consulted at the beginning even remarked on how quickly we achieved compliance!”
Katie Baker
Director UK & Ireland, Tandem
Frequently asked questions
Get in touch if we haven't answered your question below, we are always happy to help!
The NHS Data Security and Protection Toolkit is an online self-assessment related to organisations' data protection practices, covering areas such as information governance, NHS cyber security, and data-sharing protocols to ensure compliance with data protection standards in the healthcare sector. These questions aim to assess and improve the security of patient data within NHS organisations.
The NHS Data Security and Protection Toolkit (DSPT) sets out requirements for healthcare organisations, overseen by NHS Digital, to ensure robust data protection practices, ensuring all standards met are aligned with the General Data Protection Regulation (GDPR). It encompasses measures related to information governance, cybersecurity, and data-sharing protocols to safeguard patient data.
There are 10 sections of the DSPT which include handling of personal data, staff training & responsibilities, incident response & business continuity planning and IT protection.
IG Toolkit (Information Governance Toolkit) may be another name used to refer to the DSPT, as managed by NHS Digital.
Any organisation with access to NHS patient data and systems must complete the DSPT, and that includes suppliers of digital health technology. If you're selling into the NHS, expect buyers to ask for your DSPT status during procurement.
Your organisation must first register for an ODS code with NHS England, before registering for the DSPT online.
The DSPT is an annual assessment. You review and republish your submission every year to keep your status current.
A Data Protection Impact Assessment (DPIA) is a systematic process mandated by the General Data Protection Regulation (GDPR) to evaluate and mitigate potential risks to individuals' privacy arising from specific data processing activities. It ensures that necessary safeguards are implemented to protect personal data and align with privacy regulations.
Completing a DPIA is best practice if your technology collects or processes any personal data. According to GDPR, a DPIA is officially required 'whenever processing is likely to result in a high risk to the rights and freedoms of individuals', and is often required during procurement regardless.
Assuric keeps your DSPT evidence in one place. Your Record of Processing Activities, Information Asset Register and risk register are built in, and work you've done for GDPR, Cyber Essentials and DTAC is mapped across. Our AI questionnaire assistant then drafts answers from your workspace, with citations, for you to review and submit.
Submit your DSPT
with confidence
Talk to us about your toolkit, with the evidence you already hold mapped across and drafted answers ready for you to review.