Meet Naq: your virtual compliance partner.
Intelligent compliance, without the hire. Naq reads your policies, maps your controls and flags what is slipping, so you are ready whenever a buyer or auditor asks.
.png)
.png)
Compliance is where regulated-market deals are won or lost
Procurement teams ask for ISO 27001, the NHS asks for DSPT v8, DTAC V2 and DCB0129, EU customers ask for GDPR evidence and Article 27 cover.
Every one of these moments puts revenue on hold until you can show proof.
Naq gets you to the proof faster, then keeps it current so the next deal moves quicker than the last.
Naq covers the framework set those buyers require from a single dashboard, with controls mapped across standards so evidence captured once satisfies several at the same time.
.gif)
Multi-framework GRC
Prove every standard with one set of evidence.
Run every standard from one workspace. Shared controls map across frameworks, so the evidence you gather for ISO 27001 quietly powers DSPT, DTAC and Cyber Essentials in the background.
Risk, safety and CAPA
Close every risk before it becomes an incident.
Log risks and clinical hazards in a unified register with 5×5 scoring, then let CAPA workflows carry each one from root cause to corrective action without anything slipping through the cracks.
.gif)
Document lifecycle
Keep every policy audit-ready, automatically.
Move policies from draft to approved in a controlled workflow with semantic versioning and enforced reviews. Edit an existing PDF in place, so you never lose the audit trail to a desktop folder.
Compliance training
Show competence without chasing certificates.
Assign structured courses and assessments per employee, with automatic renewals and reminders. Every completion ties back to a control as evidence of competence, ready when the auditor asks.
.gif)
Asset registry
Spot gaps before a buyer or auditor does.
Keep people, devices and vendors in one place with per-user MFA and access tracking. Naq flags missing vendor DPAs proactively, so gaps surface before a buyer or auditor finds them.
AI assistant
Answer compliance questions in seconds, not days.
Get on-demand summaries and evidence checks across your whole programme. Read-only by design, so it accelerates your team without ever quietly editing the formal record.
The standards regulated buyers ask for.
Your first framework builds the foundations for the rest.
NHS DSPT
The Data Security and Protection Toolkit every NHS supplier publishes against each year. Naq keeps the standards met between submissions.
NHS DTAC
The assessment criteria for any digital product entering the NHS. Version 2 went live in February 2026; Naq holds the current form complete.
DCB 0129
The clinical safety standard for health IT manufacturers. Hazard log and safety case in one record, flagged for CSO sign-off on every change.
ISO 27001
The information security standard enterprise procurement asks for first. Ready for every surveillance audit, not just the first one.
ISO 9001
Quality management, built on the controls you already hold for 27001. Shared clauses count once.
Cyber Essentials
The NCSC baseline for UK public-sector contracts. Renewed before it expires, with Plus when the buyer asks.
UK and EU GDPR
A living Article 30 record, DPIAs drafted from it, and a DSAR register your Assistant can answer from.
SOC 2
The security report US enterprise buyers ask for. Naq keeps the controls running and the evidence ready for the CPA firm that signs it.
HIPAA
The US rules for protecting patient health data, binding on suppliers to American providers and insurers. Naq keeps your safeguards documented and evidenced.
Custom frameworks
A buyer's own standard, a sector code or an internal policy set. Scoped with you, mapped to the controls you already hold.Comprehensive compliance expertise
Naq's in-house experts sit alongside the platform for the decisions and conversations software cannot run on its own. Clinical Safety Officers, virtual DPOs and certified consultants are available for evidence interpretation and framework-specific narratives that need a named human.
Testimonials
“We have been compliant with DTAC assessment for some time, but maintaining and demonstrating our credentials in the past has been onerous. The Naq platform makes the whole process remarkably seamless to complete, offering intuitive means to easily share our compliance status”
“We wanted a system to ensure absolute clarity on what is needed to meet the DTAC. The support the NIA received from Naq was immeasurable; the Naq team were always responsive and willing to offer advice when needed. We would recommend Naq for any innovator looking to undertake the DTAC.”
“Naq is a game-changer for startups in the digital health/med tech space, offering unparalleled value and peace of mind. Their user-friendly platform consolidates all our DSPT and DTAC compliance requirements, helping us achieve what would have cost us over £10,000 in legal fees for a fraction of the price.”
"The Naq team are not only cyber and GDPR specialists but specifically know and understand DTAC. Through the platform and with the support of the team, we have met our NHS compliance requirements at less than half the cost of alternative routes. This has meant we haven’t compromised our product build or finances."
"Naq takes the hassle out of meeting our GDPR compliance and cybersecurity requirements. An all-round excellent service"
"Naq provided outstanding service to prepare us for and enable us to meet the complex cyber security regulatory requirements for the NHS. Their help with internal device security was invaluable in improving our security posture."
"Since we engaged with Naq to help manage all of our cyber security and GDPR needs, they have been nothing short of brilliant."
"We reviewed a variety of DSPT services and were becoming overwhelmed by the time commitments and costs quoted, which could have significantly impacted our small business. Then we stumbled upon Naq. Naq's DSPT automation capabilities revolutionised our compliance journey, saving us countless hours and consulting fees."
“Naq helped us complete our Cyber Essentials and DSPT toolkit applications, which we needed for us to continue growing our healthcare business. I already know next year’s DSPT Toolkit will be easy with Naq.”
"I'm really impressed with the service I've received from Naq. Without their support, it would have been a nightmare to complete our NHS DSPT and Cyber Essentials applications."
"Naq ensures that our business is compliant and our data stays secure. Their platform brings together all of our compliance policies into a single dashboard, making it easy to see where we stand, even as our business becomes more complex"
"As a small business, data compliance and cybersecurity can feel overwhelming. Naq has combined all the processes and policies that we need in to one easy-to-use platform"
“Naq's platform made the complex journey of achieving NHS DSPT compliance remarkably straightforward. Their team of experts were always responsive and went above and beyond to address our queries and concerns. Highly recommended.”
"As well as the platform, their service continues to scale with our demands; they've even helped us tailor our compliance policies in line with the new markets where we want to operate."
"Naq has been instrumental in achieving compliance and security, obtaining ISO 27001 certification and shortening our sales cycle by easily demonstrating our compliance to enterprise customers."
Learn more from our security & compliance experts
.png)
What You Need to Know About DTAC Version 2
NHS England introduced an updated Digital Technology Assessment Criteria form on 24 February 2026. Manufacturers and NHS organisations must transition to DTAC version 2 before 6 April 2026, when the previous version will no longer be accepted.
