CarePath · Compliance, security & quality
NDTMS compliance at our core.
Quality and security in everything we do.
Specialist case management for substance misuse services, backed by
recognised standards and people who take responsibility.
Technology that helps services support people to change their lives.
Standards & assurance
Our people & processes
A foundation of CarePath
NDTMS-compliant case management.
National reporting is central to the services we support.
It is central to CarePath too.
The National Drug Treatment Monitoring System (NDTMS) is a core
consideration in how we develop and support CarePath for
substance misuse services.
Our focus is on connecting day-to-day case management with the
information services need for national reporting, service oversight
and understanding the care they provide.
- Community adult services
- Young people’s services
- Secure settings

NDTMS
Recognised standards. Clear evidence.
Assurance you can recognise.
Behind every record is a real person who needs help and support. We recognise the responsibility that comes with being trusted with their information.
CarePath is a compliant and secure platform, specifically designed to help services support the care and recovery of some of the most vulnerable people in our communities. Our commitment to quality, information security and clinical safety is rooted in that purpose.
Our standards and assurance processes help us put that commitment into practice—supporting our mission: technology that helps services support people to change their lives.

ISO 27001:2022
Information security
A structured approach to managing information security risks,
with policies, responsibilities and controls supporting our work.

ISO 9001:2015
Quality management
A framework for consistent delivery, reviewing our processes
and making improvements. ILLY has held ISO 9001 registration
since 2004.

Cyber Essentials Plus
Cyber security
Independent technical assessment against the Cyber Essentials
requirements, supporting our approach to protection against
common cyber threats.

DCB0129
Clinical safety
CarePath’s clinical safety work includes independent assurance
by Safehand. We can explain the relevant product scope and
supporting safety documentation.

NHS DSP Toolkit
Data security and governance
Our Toolkit assessment provides information about our data
security and information governance arrangements. Ask us for
our current published status and assessment details.
Public-sector procurement
Purchasing through G-Cloud
Talk to us about the relevant CarePath listing and the procurement
route for your service.

Recognising the work behind the standards
Good systems depend on good people.
Behind every release, migration and support conversation are
colleagues bringing care, experience and judgement to their work.
A discrepancy spotted. A test completed carefully.
An explanation that helps someone move forward.
We value that work, and the people who do it.
Care in everyday delivery
A shared responsibility, across our team.
Development & testing
Turning service needs into practical tools, questioning
assumptions and checking the details.
Infrastructure
Looking after the environments our services depend on and
helping teams prepare for technical change.
Delivery & training
Coordinating migrations, workshops and guidance so people
are supported through change.
Support & improvement
Listening, investigating and using customer feedback and
user groups to inform improvements.
Clear answers for your service
Let’s discuss the evidence you need.
From NDTMS reporting to security, clinical safety and procurement,
we can help you understand the scope relevant to your service.

Quality and information security management