top of page

NHS Compliance Tool

Answer 10 questions to understand which NHS clinical safety, cybersecurity and medical device requirements and regulations apply to your product.

Question 1 of 10

Is your product a type of software (including AI; Software packaged with hardware etc)?

Question 2 of 10

Will your product be used to support or deliver health or social care services?

Question 3 of 10

Does your product affect access to or perform an action on clinical data (e.g. analysing, calculating, interpreting, predicting, recommending or altering)?

Question 4 of 10

Could a misconfiguration, incorrect output, unexpected behaviour, loss of availability or cyber-attack of your product cause or contribute to patient harm?

Question 5 of 10

Is your product intended to diagnose, prevent, monitor, predict, prognose, treat or alleviate disease or injury, or otherwise provide information for a medical purpose?

Question 6 of 10

Does your product provide information that drives or influences diagnosis or treatment decisions where an incorrect output could cause serious deterioration, invasive interventions or death?

Question 7 of 10

Is your product intended to monitor physiological processes or parameters where variations could result in immediate danger to the patient?

Question 8 of 10

Does your product use artificial intelligence/machine learning to generate or influence clinical predictions, recommendations, classifications or decisions?

Question 9 of 10

Does your organisation have 50 or more employees globally?

Question 10 of 10

Does your organisation have £10m or more in global revenue per year?

Your Compliance Results

DCB0129 Clinical Safety

ASSESSMENT RESULT WILL APPEAR HERE

Medical Device Status

ASSESSMENT RESULT WILL APPEAR HERE

DSPT Audit Status

ASSESSMENT RESULT WILL APPEAR HERE

Important:  DSPT submissions apply to all businesses that process patient data or whose products interact with NHS systems. 

This assessment provides an indicative screening result based on the information you have provided. It does not constitute legal, regulatory or clinical safety advice, certification, or a formal determination of compliance. Regulatory requirements depend on the specific product, intended purpose, deployment and organisational context. Where further assessment is recommended, or where you are uncertain about your obligations, contact our experts.

bottom of page