Trust and security
No names or addresses. By design.
A plan never carries the name, date of birth or address of the person it is for, only a reference your service issues. The clinical details in it are pseudonymised, which is what makes it safe to share with every organisation involved in someone's care.
The principles
Three decisions everything else follows from.
No names or addresses stored
No name, date of birth or address of the person being cared for is asked for or kept. They are a reference only your service can match.
Safe to share
An NHS trust, a council, a care home and an agency can all open the same plan, because it carries a reference, never a name.
One code, one plan
A plan code opens that plan and nothing else. There are no accounts for care teams to lose.
The facts
For your information governance lead.
Where and how
- Hosted on UK serversIn a UK data centre.
- Encrypted in transitEvery page and plan is served over HTTPS.
- Sign-in protectionSign-in pauses after repeated failed attempts.
What is kept, and for how long
- The plan and its codeThe plans chosen, the clinician's notes and the client reference.
- Read recordsThe name, role and organisation each carer records, and when.
- Deleted after 12 monthsPlans and codes are deleted 12 months after the last save.
Guarding the edges
- The assistant refuses personal detailsAda will not take a name, date of birth or address.
- So do support ticketsA ticket that carries personal details is refused before it is stored.
- A record of accessEvery time a plan is opened is logged for the clinician who saved it.