NHS DTAC Compliance

Digital Technology Assessment Criteria compliance information

Clinical Safety Statement

IMPORTANT NOTICE

This application is a workplace wellbeing support tool and is NOT a substitute for professional medical advice, diagnosis, or treatment.

  • •If you are experiencing a mental health crisis, contact emergency services (999) or NHS 111 immediately
  • •Always seek advice from qualified healthcare professionals for medical concerns
  • •This tool provides guidance and support but does not diagnose or treat medical conditions
  • •AI-generated content is for informational purposes only and should be verified by professionals

Clinical Safety Classification

This application is classified as a Class A digital health technology under DCB0129 (low risk):

  • • Provides information and self-management support
  • • Does not directly influence clinical decision-making
  • • Does not store or process clinical health records

Hazard Management

Clinical safety hazards have been assessed and mitigated through:

  • • Clear disclaimers and signposting to professional services
  • • Crisis intervention prompts for concerning patterns
  • • No diagnostic or treatment capabilities
  • • Regular content review and updates
Data Protection & Privacy (GDPR/UK GDPR)

Legal Basis

Data processing is conducted under legitimate interest (Article 6(1)(f) GDPR) for workplace wellbeing support, with explicit user consent obtained during onboarding.

Data Protection Measures

  • Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Access Control: Role-based access with authentication required
  • Data Minimization: Only essential data collected
  • Retention: Data retained only as long as necessary, with user-initiated deletion available
  • Right to Access: Users can export their data at any time
  • Right to Erasure: Complete data deletion available in Settings

Third-Party Processing

AI features use secure, GDPR-compliant third-party processors with data processing agreements in place.

Data Protection Officer Contact: For privacy concerns, contact your organization's Data Protection Officer

Accessibility (WCAG 2.1 AA)

Accessibility Compliance

This application has been designed to meet WCAG 2.1 Level AA standards:

  • ✓Perceivable: Sufficient color contrast, text alternatives for images, resizable text
  • ✓Operable: Keyboard navigation, no time limits, clear navigation structure
  • ✓Understandable: Plain language, predictable navigation, error identification
  • ✓Robust: Compatible with assistive technologies

Accessibility Features

  • • Adjustable text size and contrast settings
  • • Low cognitive load mode for simplified interface
  • • Screen reader compatible
  • • Keyboard-only navigation supported
  • • Clear error messages and form validation

Report accessibility issues: Help us improve by reporting any accessibility barriers through the feedback form

Interoperability & Standards

Technical Standards

  • •Data Exchange: RESTful API with JSON data format
  • •Authentication: OAuth 2.0 / OpenID Connect compatible
  • •Security: TLS 1.3 for data in transit
  • •Export: Data portable in standard formats (JSON, CSV)

Integration Capabilities

The system can integrate with organizational HR systems and occupational health services through secure APIs, maintaining data protection standards.

Additional Compliance Information

Version

1.0.0

Last Updated

January 2026

Compliance Review

Annual

Support Contact

Via organization's IT support