NHS DTAC Compliance – Independently Assured by Acorn Compliance
Empathika has been independently assessed and assured by Acorn Compliance, a trusted healthcare compliance consultancy, as fully meeting the NHS Digital Technology Assessment Criteria (DTAC).
This rigorous audit evaluated Empathika across all five DTAC domains:
Clinical Safety
Data Protection & Privacy
Technical Security
Interoperability
Information Security Management & Business Continuity
Following the comprehensive assessment, Acorn Compliance confirmed that Empathika meets key NHS standards and is safe, secure, and ready for deployment across NHS settings.
This DTAC assurance underscores our unwavering commitment to patient and resident safety, data protection, and delivering robust, compliant digital healthcare solutions.
Information Commissioner's Office (ICO)
We are registered with the Information Commissioner's Office (ICO), the UK’s independent authority for upholding information rights and data privacy. This registration reflects our commitment to handling personal data lawfully, fairly, and transparently, in full compliance with data protection laws including the UK GDPR and Data Protection Act 2018.
NHS DSPT - Standards Exceeded
The NHS Data Security and Protection Toolkit (DSPT) is a mandatory online self-assessment that all organizations processing or accessing NHS patient data must complete annually. Achieving "Standards Exceeded" signifies that we not only meet the rigorous data security and protection standards required by the NHS but also hold the highly regarded Cyber Essentials Plus certification, demonstrating an even higher level of commitment to data security.
NHS DTAC
We are fully compliant with the NHS Digital Technology Assessment Criteria (DTAC), the national standard for evaluating digital health technologies. This compliance confirms that our solutions meet stringent NHS requirements across clinical safety, data protection, technical security, interoperability, and usability & accessibility. DTAC compliance provides assurance to NHS organisations, care providers, and patients that our digital solutions are safe, secure, and fit for use in health and social care settings.
Cyber Essentials Certified
Cyber Essentials is a UK government-backed scheme that helps organizations protect themselves against a wide range of common cyber threats. Being Cyber Essentials Certified means the company has implemented essential technical controls to safeguard our systems and data from the most prevalent cyber attacks, providing a strong foundation for our cybersecurity posture.
Cyber Essentials Plus Certified
Cyber Essentials Plus is the highest level of certification within the Cyber Essentials scheme. It involves a hands-on technical verification conducted by an independent auditor, including vulnerability scans and penetration testing, to ensure our cyber defenses are robust and effective against more sophisticated attacks. This certification provides an even greater assurance of our commitment to technical security.
PRSB Partner
As a PRSB (Professional Record Standards Body) Partner, we are committed to implementing and adhering to nationally agreed information standards in health and social care. This partnership demonstrates our dedication to ensuring that information within health and social care records can be accessed by the right people, in the right place, at the right time, fostering interoperability and better, safer care.
