Trust / Accreditations

    Independently certified,continuously assessed.

    Care Safety Innovations holds ISO 27001 and Cyber Essentials certification, and operates in line with the UK GDPR. Every control behind the VCC iCON is documented, audited and renewed.

    01

    UK GDPR

    Data Protection Act 2018 / UK GDPR

    We process personal data in line with the UK GDPR and the Data Protection Act 2018. That includes lawful basis records, data minimisation, retention schedules, data subject rights handling and documented processing agreements with our customers.

    Status
    Active
    Role
    Data processor and controller
    Framework
    UK GDPR / DPA 2018
    Records
    Full audit trails
    02

    ICO Registration

    Information Commissioner's Office

    Care Safety Innovations is registered with the UK Information Commissioner's Office as a data controller. Our entry on the public register can be verified at any time using our registration reference.

    Status
    Registered
    Reference
    ZB780254
    Register
    ICO Data Protection
    Renewal
    Annual
    03

    Cyber Essentials

    IASME, on behalf of the NCSC

    The UK government-backed Cyber Essentials scheme confirms that our technical controls protect against the most common internet-based attacks, covering firewalls, secure configuration, access control, malware protection and patch management.

    Status
    Certified
    Scheme
    Cyber Essentials
    Assessed by
    IASME certification body
    Renewal
    Annual
    04

    ISO/IEC 27001

    Accredited certification body

    ISO/IEC 27001 certification mark

    Care Safety Innovations operates a certified Information Security Management System covering the development and delivery of the VCC iCON. Controls span risk management, access control, encryption, supplier assurance and continual improvement.

    Status
    Certified
    Standard
    ISO/IEC 27001:2022
    Scope
    Company-wide
    Review
    Annual surveillance