NHS compliance software for digital health companies.
Before a trust or ICB takes your software into NHS care, it asks for your clinical safety case and DTAC pack and checks your Data Security and Protection Toolkit (DSPT) result. Naq holds your hazard log and safety case in one record, beside a DTAC for each product.
.png)
.png)
Your product enters the NHS with its safety case on file.
The problem
A release that changes clinical risk has to be written into the hazard log and the safety case before a trust asks. The Clinical Safety Officer who signs them off may be part-time or brought in from outside.
The outcome
When the Clinical Safety Officer role changes hands, the hazard log and every sign-off on it remain in Naq.
How Naq helps
Hazards tied to the product
Each hazard is logged against a product with its causes and scored on a 5×5 matrix before and after controls.
A DTAC for each product
Hold a separate DTAC for each product, each with its own scope and schedule.
Every change flagged
Every change to the hazard log or safety case is flagged for sign-off by your Clinical Safety Officer, a registered clinician. The sign-off is recorded in your Naq record.
A head start on documents
Start your Clinical Risk Management Plan and Clinical Safety Case Report from templates, and import the hazard log you already keep.
Frameworks, scopes and controls that share evidence
Choose the frameworks you are measured against and the scope each one covers. One control meets requirements in several frameworks, so the work is done once. Evidence checks run on a schedule, and a control drops back to needs review when its evidence expires.
Policies drafted from templates, approved and acknowledged
Start from a template already mapped to your frameworks. Your organisation’s details fill in, you submit it for approval, and the approved version goes to everyone who must read and acknowledge it. Naq reopens it on its review date.
Suppliers, risks, incidents and corrective actions
Track suppliers and who has access to each one. Score every risk before and after treatment and set its review date. Log incidents with what happened, then follow each corrective action through to closed.
Answers from your records, drafts for your approval
Ask a question and Naq Assistant looks up your own records before it answers. It suggests which controls a policy supports and drafts DPIAs from your workspace. It only works when someone asks, and nothing is applied until a person approves it.
A trust's request, answered from one record.
If the hazard log sits in a spreadsheet and the DTAC answers sit in a document, each trust request starts with gathering them.
Virtual compliance partnerWhat a trust or ICB checks before it buys.
DCB0129
The clinical safety standard for health IT manufacturers.
NHS DTAC
The assessment criteria for any digital product entering the NHS, with version 2 live since February 2026.
NHS DSPT
The toolkit NHS suppliers publish against each year.
Medical device certification under MDR, UKCA or ISO 13485 sits outside Naq.
Your own DPO and CSO, or a named expert from Naq's partner network.
Some decisions need a person with their name on them: a Clinical Safety Officer signing off a hazard log, a DPO reviewing a transfer clause. Whoever holds the role records their review or sign-off inside your Naq record, so every decision stays in the audit trail.
Bring your existing DPO or CSO into Naq
Invite your in-house or outsourced specialist as a user and assign them the named role. Naq routes the reviews and approvals that need them, and their review or sign-off is recorded against the record.
Access Naq's partner network
Naq partners with specialist firms who take on the named role for you. Meet them before you commit. They work inside your Naq workspace, alongside your team.
ISO 27001, DTAC and DSPT, achieved and kept with Naq.
“Maintaining and demonstrating our credentials in the past has been onerous. The Naq platform makes the whole process remarkably seamless.”
Dr Taz Aldawoud, Founder & CEO, Doc Abode
“Naq has been instrumental in obtaining ISO 27001 certification and shortening our sales cycle by easily demonstrating our compliance to enterprise customers.”
Arnold Bouwman, Co-founder, Vormats
“Naq helped us complete our Cyber Essentials and DSPT toolkit applications. I already know next year’s DSPT Toolkit will be easy with Naq.”
Otesa, NHS supplierShow us the product you are taking to the NHS.
The demo starts with its hazard log and DTAC pack.
