CareDocs passes ISO 27001 audit ahead of NHS assurance deadline

Care Management Systems Ltd, the company behind CareDocs, has been awarded ISO 27001 certification, the international standard for information security management. DSCR suppliers will need to hold this certification from 1 September 2026, and CareDocs has met it ahead of that deadline. 

The audit covered the security processes, staff training and system controls CareDocs uses to protect the information held on behalf of its care provider customers. Passing it puts the company in a stronger position to support existing customers and to compete for new NHS-assured business as the sector’s data security requirements tighten. 

The certification process was led internally by CareDocs’ IT team, with staff across the business completing training and adapting day-to-day processes to meet the standard’s requirements. 

ISO 27001 is one of the requirements CareDocs must satisfy to reach conformity with version 2 of the NHS’s Information Governance standard, itself part of the wider Assured Supplier frameworks. CareDocs already holds conformance with version 1 of the Information Governance standard, and has been working through the further, more software-oriented requirements that version 2 introduces. 

CareDocs’ work on the wider Assured Supplier framework began in March 2024, with the company being awarded Assured Supplier status in July 2026. The company continues to work towards Information Governance standard version 2 conformity ahead of the 1 September deadline.