Standards met
01 / EvidenceNHS DSPT
National Health Service
Our published 2025–26 assessment met the data security standards set by the NHS in England.
View the official recordSecurity & Compliance
A secure foundation for your clinic data.
Review our assurance standards, certifications and the safeguards that protect clinic data every day.
Role-based accessTLS in transitEncrypted backupsSecurity evidence on request
Assurance standards and certificates
Security you can review, backed by records and certificates.
Review our published NHS assessment and request certificate scope and validity details from our team.
Certified
02 / EvidenceISO 27001
Information security management
The certificate records its scope, certification body and validity dates.
Request the certificateCertified
03 / EvidenceISO 15504 / SPICE
Software process assessment
An independent assessment of software development and process maturity.
Request the certificatePublished assessments and certificates are different forms of evidence. The relevant record or certificate defines its scope and validity.
Security controls
Your clinic data is protected at every stage.
Benefit from secure access, encryption, backups and service continuity without having to manage the technical detail.
Account access
Set access by role.
Clinic admins choose what each role can see and do. Optional IP restrictions can block sign-ins outside approved clinic networks.
Data protection
Encrypt data and back it up.
TLS protects data in transit. Supported data stores are encrypted at rest. Backups are encrypted and covered by recovery procedures.
Monitoring & maintenance
Monitor the service and fix vulnerabilities.
Centralised logs and alerts help our team spot service issues. We scan for vulnerabilities, fix findings and use external testing where appropriate.
Staff & support access
Restrict staff access.
Only authorised staff can access systems or data. Access depends on role and need, with confidentiality duties, security training and incident procedures.
MedicasimpleSecurity layer
Secure accessEncrypted data flowTwo backup locations99.9% service availability
Privacy and contact
Privacy information and security contact.
Review how we handle data in our Privacy Policy or contact our team about a potential security issue.
Security questions
Security questions.
Does Medicasimple guarantee absolute security?+
No online service can guarantee absolute security. We use technical and organisational controls to reduce risk, monitor the service and respond to incidents.
How can a clinic control account access?+
Clinic admins assign permissions by role. Optional IP restrictions can limit access to approved networks.
Where can a procurement team review registrations, publications and certificates?+
The Trust Centre labels each item as registered, published or certified, links official public sources and provides a form for certificate requests.
How should a vulnerability be reported?+
Email security@medicasimple.com with enough detail to investigate. Do not publish the suspected vulnerability while we review it.
Evidence for your review
Need a certificate or security document?
Request the certificate or security document your team needs.