Assurance and governance
for healthcare

DCB0160 is the NHS clinical risk management standard for health and care organisations that deploy and use health IT systems. If you are rolling out digital technology that supports patient care, you need a clinical risk management process, a named Clinical Safety Officer, a hazard log and a clinical safety case for each deployment.

Assuric brings supplier evidence, DCB0129 outputs and your own DCB0160 work into one place, so assessments start from what you already have rather than a blank template. Hazards, controls and evidence are reused across deployments, AI helps draft and review documents, and our fractional Clinical Safety Officers add capacity when your team is stretched, so new systems reach patients sooner without cutting corners on safety.

Send DTAC and information governance questionnaires to suppliers through a supplier portal, and collect their DTAC responses, DCB0129 documents and security evidence in one place. Your team reviews every supplier against the same standard, sees gaps straight away, and keeps agreements, risks and review dates with each supplier, so assurance does not hold up deployment.

Yes. Start each Data Protection Impact Assessment from a template, pre-filled from the supplier, data and processing information already in Assuric, then track it through review and approval. Every DPIA is kept with the supplier and system it relates to, can be shared with external stakeholders, and can be reviewed by one of our Data Protection Officers if you need extra capacity.

Yes. Alongside clinical risk, you can run your corporate, operational, information governance and security risk registers in Assuric. Each risk has an owner, a score and a treatment plan on a risk matrix that fits your organisation, with review dates and reminders, and links to the assets, suppliers and controls it relates to. You can start from a library of common risks, let AI suggest ones you might have missed, and report on every register from one place.

Each deployment gets its own hazard log and safety case, while shared hazards, controls and evidence are reused across them. Your clinical safety team sees every deployment, owner and outstanding action in one register, instead of a folder of separate documents.

Yes. DCB0160 requires a named, suitably qualified Clinical Safety Officer to oversee clinical risk management. If you do not have the capacity in-house, our fractional CSOs work inside your Assuric workspace and support your team with assessments, sign-off and incidents.

Yes. Every DSPT assertion has its evidence attached and an owner named, with reminders before your annual deadline, so the submission is a review of work you have already done rather than a scramble at the end.

Yes. Assuric maps your policies, incidents, audits and staff records to the CQC quality statements, so you can see where you stand and close gaps well before an inspection. Our CQC specialists can also support you with registration and inspection preparation. See CQC compliance↗.

NHS trusts, health boards, integrated care systems, GP practices and independent providers. Our customers include NHS trusts, GP practices, and private healthcare, from large groups to small clinics.

Yes. Assuric is ISO 27001 certified by a UKAS-accredited certification body, holds Cyber Essentials Plus, and exceeds the NHS DSPT standards, with single sign-on and granular access controls for your team.