Data security and privacy are our highest priorities. Care Pathway Pro is built with enterprise-grade security and full compliance with UK regulations.
Security Features:
UK Data Centers: All data is stored in ISO 27001 certified data centers located exclusively in the United Kingdom, ensuring compliance with data sovereignty requirements.
Encryption:
- 256-bit AES encryption for data at rest
- TLS 1.3 encryption for all data in transit
- Encrypted database backups
Access Controls:
- Role-based access control (RBAC) ensuring staff only see what they need
- Multi-factor authentication (MFA) available
- IP whitelisting for enhanced security
- Automatic session timeout after inactivity
- Password complexity requirements
Audit Trails: Complete logging of all system access and changes with user attribution, timestamps, and change history. Perfect for demonstrating CQC compliance.
Regular Backups: Automated daily backups with 30-day retention. Backups are encrypted and stored in geographically separate locations for disaster recovery.
Compliance Certifications:
UK GDPR Compliant: Care Pathway Pro is fully compliant with UK GDPR requirements including:
- Data processing agreements available
- Right to access (subject access requests)
- Right to rectification
- Right to erasure
- Data portability
- Privacy by design principles
DSPT (Data Security and Protection Toolkit): We maintain Standards Met status on DSPT, demonstrating our commitment to data security best practices.
NHS IG Toolkit: Compliant with NHS Information Governance requirements for organisations working with NHS-funded care.
Cyber Essentials Plus: Certified to Cyber Essentials Plus, the UK government backed scheme for cyber security.
ISO 27001: Our infrastructure partners are ISO 27001 certified for information security management.
Business Continuity:
- 99.9% uptime SLA
- 24/7 system monitoring
- Disaster recovery plan tested quarterly
- Redundant systems for high availability
We undergo regular third-party security audits and penetration testing to ensure ongoing protection of your sensitive data.