NHS DSPT assessment
NHS DSPT, prepared from evidence your client already holds
The Data Security and Protection Toolkit is an annual self-assessment, and the work is almost entirely evidence gathering. Celeredge reads what the client has, maps it to the assertions, and shows your team what is genuinely missing.
From $59 per seat / month billed annually ($70 monthly), after a 7-day free trial. Preparation support for the client's own submission, not a submission service or an assurance opinion.
The problem
Where DSPT preparation loses time
An annual scramble
The toolkit is a once-a-year event, so evidence gathering restarts every year, and every healthcare client you support hits the same deadline.
Evidence exists but is not mapped
Most clients already hold the policies and training records the assertions ask for. What is missing is the mapping, not the material.
Suppliers asked for proof
Health-tech suppliers get asked for DSPT status by commissioners, and need the preparation done quickly and defensibly.
How Celeredge helps
The client's evidence, mapped to the assertions
Celeredge reads the client's policies, training records, registers and previous submissions, maps them to the toolkit's assertions, and separates what is genuinely absent from what simply was not linked.
- Existing evidence mapped rather than re-collected
- Every mapping cites the source document behind it
- Genuine gaps separated from unmapped material and ranked
- Re-runnable next year against the same evidence base
Explore more
Related to NHS DSPT
Questions
NHS DSPT assessment FAQ
Does Celeredge submit the toolkit?
No. The submission stays with the client organisation. Celeredge supports the preparation: mapping evidence to assertions, and showing your team what is missing before the client submits.
The toolkit changed. Which version is assessed?
The toolkit has been moving towards a Cyber Assessment Framework aligned structure, and the version that applies depends on the client's organisation type. Confirm the applicable version with us before you rely on a run, and the framework can be authored to match it.
Our client is a supplier, not a trust. Is this relevant?
Yes. Suppliers handling NHS patient data are routinely asked to evidence DSPT status by commissioners, and the preparation work is the same.
Prepare it from what the client already has.
Map a client's existing evidence to the assertions before the annual deadline, not during it.