Protected patient records
Implant information is stored in your protected patient record, with encrypted storage and controlled access. Staff permissions are separate from patient access.
GOVERNANCE & INFORMATION SECURITY
How data is stored
Your account, implant record and sharing choices are kept separate so you can control who sees your information.
Information governance and IT security are part of how ImplantPassport is designed and operated, from storing your record to sharing the details you choose.
ASSURANCE & GOVERNANCE
Governance and IT standards
We have worked with NHS Information Governance teams to ensure the platform meets the rigorous standards required to manage patient information.
- ISO 27001Information security
- Data Protection Act & GDPRData protection obligations
- NHS DSP ToolkitData-security assessment
- G-CloudSupplier framework
- Data Centre AllianceFacility classification
- European Code of ConductData-centre energy efficiency
- Cyber Essentials PlusCybersecurity certification
Protecting your information
Separate accounts and payments
Sign-in, patient records and payment processing are kept separate. Implant model numbers, device settings and clinical notes are not sent to the payment provider.
Recorded access and changes
Support access is recorded. Staff amendments require a reason and are recorded in an audit history. Security checks protect card reading and form submissions.
You control sharing
Emergency and family sharing are optional. You choose the information to share and can revoke a link. Anyone holding an enabled link or a photograph of its QR code can open the selected summary without signing in.
Patient forms and shared records contain no advertising trackers. Health information is not used for advertising.
Your privacy and rights
Read how your information is used, how long it is kept and how to exercise your rights.