The NHS or care provider asked about your security. Answer from records your people have approved.
If you build software or devices for the NHS or social care, buyers want to know how you protect people’s data, and many ask about ISO 27001. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so the answers come from policies, risks and evidence that already exist and are kept current.
20 minutes with the founder · video or phone · free. Look round a fully set-up demo company first, then £300 a month, billed monthly, cancel with 30 days’ notice. No VAT charged. Optional setup consulting from SW Digital Services is £500 to £700 a day.
What health and care buyers ask you for
Supplier security questionnaires
Trusts, integrated care boards, care groups and local authorities send their own supplier questionnaires, often at procurement and again at renewal.
Questions about the DSPT
Buyers often ask whether you complete the Data Security and Protection Toolkit. It’s a separate NHS scheme; we don’t claim ClearIMS completes it for you.
ISO 27001 named in the requirement
Tenders and contracts sometimes ask for ISO 27001, or for evidence that you run security as a managed system.
Handling incidents and suppliers
Buyers ask how you handle incidents, who your own suppliers are and how you check them. The answers need dates, owners and records.
ISO 27001 doesn’t replace NHS schemes such as the DSPT, and ClearIMS doesn’t complete them for you. An ISMS gives you one set of approved records to draw on whichever buyer asks.
How ClearIMS helps a small team keep up
Drafting and admin are what ClearIMS is built to take on. A named person in your organisation approves every record; the AI never approves anything.
Questionnaire answers drafted from your records
Once AI is activated, it drafts answers to customer security questionnaires from your approved records, with sources, so you can check each answer against the policy it came from before it goes back.
A virtual ISMS manager in your inbox
ClearIMS emails owners about outstanding and overdue actions, and they reply in plain English to update them. Reviews and checks don’t quietly slip, and the record shows who did what.
A supplier register and assessments
Keep a register of your suppliers and send each a security assessment from a questionnaire template, so you can show buyers how you check the people you rely on.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
Questions we get asked
Does ClearIMS complete the DSPT for us?
No. The DSPT is a separate NHS scheme and we make no claim that ClearIMS completes it. An ISMS gives you approved records that buyers’ questions of every kind can be answered from.
Do we have to hold ISO 27001 before bidding?
Not always. It depends on the buyer and the requirement. Our guides explain what to do when a customer asks for it, and a running ISMS is the base either way.
Who approves what the AI drafts?
A named person in your organisation. Once AI is activated it drafts; it never approves anything, and nothing here is a certification or a regulator’s opinion.
Bring your last health or care questionnaire to a 20-minute call.
We’ll show you how ClearIMS would handle it and give you a straight answer on whether it fits your team.
- Try the demo company first: an invented business with its ISMS fully set up, for you to look round.
- Then £300 a month, billed monthly. Monthly plans cancel with 30 days’ notice.
- One price for your organisation, unlimited users. No VAT charged.
- Optional setup consulting from SW Digital Services: £500 to £700 a day, quoted per job.
FURTHER READING
DSPT vs ISO 27001: what NHS suppliers actually need
8 min read · UpdatedDo NHS suppliers need ISO 27001, the DSPT or both? How the Data Security and Protection Toolkit, ISO 27001 and DTAC differ, and where they overlap.
What is a customer security questionnaire, and how do you answer one?
7 min read · UpdatedWhy customers send security questionnaires, what they ask, how to answer them quickly and honestly, and how ISO 27001 makes the next one easier.