Standards and certifications
This table states our status against each standard and scheme exactly. Where a status is not listed, we do not claim it.
Last updated
Status by standard
| Standard or scheme | What it covers | Our status | Scope |
|---|---|---|---|
| DCB0129 | Clinical risk management in the manufacture of health IT systems | Prime Assist has a clinical safety case under DCB0129 | Prime Assist |
| DCB0160 | Clinical risk management in the deployment and use of health IT systems, by the organisation deploying them | [TO CONFIRM: What we provide to support customers' DCB0160 work, now offered as clinical safety for AI you deploy.] | Support for customers |
| Digital Technology Assessment Criteria (DTAC) | The NHS baseline for clinical safety, data protection, technical security, interoperability and usability | [TO CONFIRM: DTAC version and date for Prime Assist.] | Prime Assist |
| Data Security and Protection Toolkit (DSPT) | Self-assessment against the National Data Guardian's data security standards | [TO CONFIRM: Exact published status and year.] | |
| ISO/IEC 27001 | Information security management | [TO CONFIRM: Certifying body] | |
| Cyber Essentials | A UK government-backed baseline of technical security controls | [TO CONFIRM: Cyber Essentials or Cyber Essentials Plus] | |
| ICO registration | Registration with the UK data protection regulator | Registered with the ICO, the UK data protection regulator, registration number ZB592265 | |
| WCAG 2.2 AA | Web accessibility | Our target for this website | gateway-global.co.uk |
| EU AI Act transparency (Article 50) | Telling people when they are interacting with an AI system | We tell people when they are dealing with AI: our voice agents say so at the start of every call, chat assistants label themselves, and AI-generated content we publish is labelled where relevant. | Our AI products |
Is Gateway Global approved by the NHS?
There is no single NHS certificate that approves AI suppliers. NHS organisations check each supplier against national standards, such as DCB0129, the Digital Technology Assessment Criteria (DTAC) and the Data Security and Protection Toolkit.
Our status against each standard we can state is in the table above. We do not claim NHS approval, endorsement or partnership.
Certification marks
We show a scheme's official mark only if we hold it and the scheme's rules allow us to use it.