Compliance and Security

CarePath · Compliance, security & quality

NDTMS compliance at our core.
Quality and security in everything we do.

Specialist case management for substance misuse services, backed by
recognised standards and people who take responsibility.

Technology that helps services support people to change their lives.

A foundation of CarePath

NDTMS-compliant case management.

National reporting is central to the services we support.
It is central to CarePath too.

The National Drug Treatment Monitoring System (NDTMS) is a core
consideration in how we develop and support CarePath for
substance misuse services.

Our focus is on connecting day-to-day case management with the
information services need for national reporting, service oversight
and understanding the care they provide.

  • Community adult services
  • Young people’s services
  • Secure settings


Discuss your NDTMS requirements

Office for Health Improvement and Disparities
National Drug Treatment Monitoring System
NDTMS

Recognised standards. Clear evidence.

Assurance you can recognise.

Behind every record is a real person who needs help and support. We recognise the responsibility that comes with being trusted with their information.

CarePath is a compliant and secure platform, specifically designed to help services support the care and recovery of some of the most vulnerable people in our communities. Our commitment to quality, information security and clinical safety is rooted in that purpose.

Our standards and assurance processes help us put that commitment into practice—supporting our mission: technology that helps services support people to change their lives.

ISOQAR and UKAS management systems certification marksQuality and information security management
Our ISO certifications support the processes behind our work.
Certificate number: 21908.

ISO 27001 information security certification mark

ISO 27001:2022

Information security

A structured approach to managing information security risks,
with policies, responsibilities and controls supporting our work.

ISO 9001 quality management certification mark

ISO 9001:2015

Quality management

A framework for consistent delivery, reviewing our processes
and making improvements. ILLY has held ISO 9001 registration
since 2004.

Cyber Essentials Plus certification mark

Cyber Essentials Plus

Cyber security

Independent technical assessment against the Cyber Essentials
requirements, supporting our approach to protection against
common cyber threats.

DCB0129 Assured by Safehand mark

DCB0129

Clinical safety

CarePath’s clinical safety work includes independent assurance
by Safehand. We can explain the relevant product scope and
supporting safety documentation.

NHS Data Security and Protection Toolkit image

NHS DSP Toolkit

Data security and governance

Our Toolkit assessment provides information about our data
security and information governance arrangements. Ask us for
our current published status and assessment details.

Crown Commercial Service supplier mark

Public-sector procurement

Purchasing through G-Cloud

Talk to us about the relevant CarePath listing and the procurement
route for your service.


Illustration of colleagues carefully reviewing a checklist and their work together.

Recognising the work behind the standards

Good systems depend on good people.

Behind every release, migration and support conversation are
colleagues bringing care, experience and judgement to their work.

A discrepancy spotted. A test completed carefully.
An explanation that helps someone move forward.

We value that work, and the people who do it.

Care in everyday delivery

A shared responsibility, across our team.

Development & testing

Turning service needs into practical tools, questioning
assumptions and checking the details.

Infrastructure

Looking after the environments our services depend on and
helping teams prepare for technical change.

Delivery & training

Coordinating migrations, workshops and guidance so people
are supported through change.

Support & improvement

Listening, investigating and using customer feedback and
user groups to inform improvements.

Clear answers for your service

Let’s discuss the evidence you need.

From NDTMS reporting to security, clinical safety and procurement,
we can help you understand the scope relevant to your service.