Trust and assurance

Clinical safety, security and data protection, documented

Buyers get a full assurance pack before signing, and practices get what they need for their own clinical safety and information governance files.

Every Arrivo module is covered by our DCB0129 clinical safety case.

Our GP Clinical Safety Officer maintains the hazard log, signs off every release, and gives each practice what it needs to complete DCB0160.

Clinical safety

  • DCB0129 safety case and hazard log, covering wrong-patient matches, missed flags, misfiled results, missed letter actions, prescription checks and wrongful list removals.
  • A GP Clinical Safety Officer who signs off every release and reviews every incident.
  • People make the clinical decisions. Clinicians set the filing rules, trained staff approve codes and prescribers sign every prescription.
  • A DCB0160 pack for your practice: hazard log extract, deployment checklist and safety case summary.

Data protection

  • Your practice is the data controller. Arrivo acts as your processor under a data processing agreement.
  • A DPIA template ready for your information governance lead.
  • UK hosting, with registration data kept only as long as your agreement allows.
  • Assured by NHS England to receive Register with a GP surgery data over MESH.

Security

  • Data Security and Protection Toolkit completed to Standards Met each year.
  • Cyber Essentials Plus and ISO 27001 certification.
  • An independent CREST penetration test every year, with a summary for buyers.
  • Encryption in transit and at rest, with every access logged.
  • A public status page showing uptime and incident history.

Procurement and standards

  • DTAC version 2.0 form and evidence for each product version.
  • WCAG 2.2 AA for every screen patients and staff use, tested with people who use assistive technology.
  • Medical device status. Results filing, letter coding and prescription checks are assessed against MHRA guidance on software as a medical device, and the assessment is in the assurance pack.

Request the assurance pack

Our clinical safety case summary, DPIA template, DTAC form and security evidence, for your practice or ICB.