Security & Assurance
Built for Healthcare, Designed for
Trust.
AuraVision provides a secure digital front door to general practice. Security isn’t just a checkbox; it is the core foundation of our design, deployment, and continued clinical use.
Assurance Layer
Cyber Security: Infrastructure Protected by Design.
Cyber Essentials Plus
We adhere to the highest UK standards for cyber hygiene, ensuring robust protection against common online threats.
Independent Security Testing
Regular penetration testing by CREST-accredited partners validates our defenses against sophisticated attack vectors.
Secure by Design
Security is not an afterthought; it is baked into our code, infrastructure, and deployment pipelines from day one.
Continuous Assurance
Real-time monitoring and automated compliance checks ensure our security posture remains defiant against evolving threats.
Compliance & Standards
Clinical Safety & NHS
Compliance Roles
AuraVision operates as a high-assurance digital service provider, meeting rigorous NHS requirements to ensure safe clinical outcomes and seamless integration.
NHS DSP Toolkit
We maintain full compliance with the Data Security and Protection Toolkit (DSPT), ensuring our organizational data security meets the NHS national standard.
DCB0129 Standard
Clinical Risk Management compliance is central to our deployment. We conduct thorough clinical safety assessments for every feature released.
Safety Guardrails
We implement rigid clinical guardrails and oversight to ensure that automated recommendations always remain under user clinical control.
Privacy & Data Control
AuraVision is built on the principle of privacy by design. We ensure your practice remains the data controller, while we act as a secure data processor under UK GDPR requirements.
UK GDPR & DPIA
Fully compliant with UK GDPR. We provide comprehensive Data Protection Impact Assessments (DPIA) to support your practice’s compliance requirements.
Privacy by Design
Privacy is embedded into every layer of our technology stack, ensuring data minimisation and purpose limitation are maintained throughout the patient journey.
Practice-Controlled Pathways
You remain in full control of how data flows. Customise pathways and access permissions to align with your practice's operational requirements.
Controller/Processor Roles
AuraVision acts strictly as a data processor. We process information only under your direction, ensuring clear accountability and data ownership.
Ready to discuss your security requirements?
Our security leads are available to walk through our technical safeguards, clinical safety protocols, and compliance documentation in detail.