NHS-ready software, honestly.
For NHS Trusts, ICBs and GP federations evaluating a small UK supplier. We tell you where we are today, where we will fit, and what we will not do without explicit scope. No accreditation we have not earned is claimed on this page.
Status, in plain English.
NHS DSPT (Data Security & Protection Toolkit)
Self-assessingTarget submission Q1 2026. We know DSPT is mandatory before any processing of patient-identifiable data — we will not touch identifiable data without a passing submission and your Trust IG sign-off.
DCB0129 (manufacturer clinical safety case)
Drafts heldDraft clinical safety cases held for HushOS and HeartLog. Full case completed at pilot signing, with a named Clinical Safety Officer (CSO) under contract.
DCB0160 (organisation clinical safety case)
Your CSO leadsYour organisation's CSO leads DCB0160. We provide the engineering safety inputs, hazard logs and design-time evidence under your governance.
MHRA position
Wellness todayHushOS and HeartLog are currently positioned as wellness apps, not medical devices. If a Trust requires UKCA / medical-device classification, we provide the technical file at pilot.
Caldicott Guardian
Contract under your CG frameworkWe do not act as Caldicott Guardian. We contract under your Trust's CG framework and document data flows accordingly.
Five places we fit.
Adjacent to clinical workflow, not inside the clinical record. Where workflows are operational, administrative or citizen-facing self-care, we can deliver inside an 8-week pilot.
X-Eagle Patient Transport
NEPTS-style dispatch, driver app, GPS, eligibility checks. Variant of our courier platform for Patient Transport ops.
HeartLog
Home blood-pressure logging + 24/36/48-hour ABPM windows + clinic-ready PDF aligned to NICE ABPM reporting.
HushOS
Tinnitus self-care PWA: pitch-match, masking, notch therapy on user's own music, CBT, sleep, check-in. Free for citizens.
ComplyOS
Workforce compliance — CQC alignment, attendance, training records, evidence vault. Built for regulated SMEs and primary-care federations.
BahiKhata-style workforce admin AI
Staffing-agency back-office: rostering paperwork, expense reconciliation, multi-entity ledger. Explicitly not a clinical record system.
The standards table, no asterisks.
| Standard | Position | Detail |
|---|---|---|
| DCB0129 / DCB0160 | Yes | Drafts held; full case completed with named CSO at pilot signing. |
| DTAC (Digital Technology Assessment Criteria) | Self-assessed | Self-assessment file available on request. Independent assessment at pilot. |
| NHS Login compatible | Planned | Timeline depends on pilot scope. Not integrated today. |
| SNOMED CT | Not yet | Will add for any clinical-record-touching work. Not present today. |
| HL7 / FHIR | Limited | X-Eagle Patient Transport speaks limited HL7 v2 for booking flows. Full FHIR pipeline scoped at pilot. |
| Cyber Essentials Plus | Targeted at NHS contract | Plus level targeted for any NHS contract. Cyber Essentials in progress today. |
Out-of-scope, by default.
Listed here so a Trust IG team can rule us in or out fast. Any of these can be brought into scope with explicit contracting and a passing DSPT — we will not do them by default.
- ×Touch Summary Care Record (SCR) or clinical-record systems without a passing DSPT and Trust-approved data-flow mapping.
- ×Replace your EHR. We integrate with it; we do not replace it.
- ×Process identifiable patient data outside the UK. Production data stays in UK / EU regions on UK-hosted infrastructure; never US.
- ×Sign a contract that asks us to act as Caldicott Guardian or be sole DPO for patient data.
- ×Deploy AI into a clinical decision path without an approved DCB0129 hazard log and your CSO's sign-off.
8-week structured pilot.
Fixed price £15k–£40k depending on scope. Pilot deliverables: working software, clinical safety case draft, DSPT-ready documentation. Either party can walk away clean at the end of week 8.
Scope week
Joint workshop. Outcome, data flows, IG mapping, DSPT gap analysis, DCB0129 hazard log started.
Build weeks
Two-week sprints. Weekly demo into your team. Engineering safety evidence captured continuously.
Evaluation week
User acceptance, safety case sign-off draft, decision: stop, continue at pilot scale, or scale to procurement.
Book a 15-minute NHS scoping call.
Founder direct. We will confirm fit, name your CSO requirements and tell you honestly whether an 8-week pilot is the right next step.