Trust / Accreditations
Care Safety Innovations holds ISO 27001, Cyber Essentials and Cyber Essentials Plus certification, and operates in line with the UK GDPR. Every control behind the VCC iCON is documented, audited and renewed.
Data Protection Act 2018 / UK GDPR
We process personal data in line with the UK GDPR and the Data Protection Act 2018. That includes lawful basis records, data minimisation, retention schedules, data subject rights handling and documented processing agreements with our customers.
Information Commissioner's Office
Care Safety Innovations is registered with the UK Information Commissioner's Office as a data controller. Our entry on the public register can be verified at any time using our registration reference.
IASME, on behalf of the NCSC
The UK government-backed Cyber Essentials scheme confirms that our technical controls protect against the most common internet-based attacks, covering firewalls, secure configuration, access control, malware protection and patch management.
IASME, on behalf of the NCSC
Cyber Essentials Plus goes beyond the self-assessed scheme: an independent assessor tests our systems hands on, verifying that the controls we declare are actually in place and effective. It covers the same five control areas, confirmed by technical audit rather than questionnaire.
Accredited certification body
Care Safety Innovations operates a certified Information Security Management System covering the development and delivery of the VCC iCON. Controls span risk management, access control, encryption, supplier assurance and continual improvement.