Try the demo

Hold as little as possible, protect what we hold

Written for information governance and IT colleagues. If something here doesn't answer your question, ask us and we'll answer in writing.

What we hold

  • Counts tier: no patient data at all. Counts of aids, sites, drop-off points and staff accounts.
  • Full tier: for each aid issued, optionally the patient's first name and mobile number, used only to send return reminders and safety notices. No NHS number, address, date of birth or clinical details.

How it's protected

  • First names and mobile numbers are encrypted in the database (AES-256-GCM), separately from the rest of the record.
  • They're hidden from staff by default. Showing one is a deliberate click, and every view is logged.
  • They're deleted automatically when the aid is returned, or 30 days after the last message (each trust can set this).
  • Links in texts carry a random code only: no name, number or health information in the address.
  • Managers and admins sign in with a password and a code from an authenticator app. Accounts lock after repeated failed attempts.
  • Each trust's data is kept separate, and every query is limited to the signed-in user's trust.
  • Texts are plain service messages about NHS equipment. They are never used for marketing.
  • No third-party tracking or advertising scripts on the app or the patient pages.

Assurance

In placeEncryption of patient fields, automatic deletion, two-step sign-in for managers, audit log of contact views, recalls and exports.
In progressData Security and Protection Toolkit (DSPT) submission as a supplier.
In progressCyber Essentials certification.
In progressDTAC (Digital Technology Assessment Criteria) evidence pack and a DPIA template for trusts.

We'll tell you the dates for each when you ask, and won't put a trust live on the Full tier until they're done to your IG team's satisfaction. The Counts tier holds no patient data, so it can start straight away.

Clinical safety

Aid Back records equipment and sends reminders; it doesn't support clinical decisions. We're writing a short hazard log covering recalls and reminders, and will share it as part of your assessment.