NHS DSPT assessment

NHS DSPT, prepared from evidence you already hold

The Data Security and Protection Toolkit is an annual self-assessment, and the work is almost entirely evidence gathering. Celeredge reads what you have, maps it to the assertions, and shows what is genuinely missing.

From $59 per seat / month, after a 7-day free trial. Preparation support for your own submission, not a submission service or an assurance opinion.

The problem

Where DSPT submissions lose time

An annual scramble

The toolkit is a once-a-year event, so the evidence gathering restarts from scratch every year and always lands against a deadline.

Evidence exists but is not mapped

Most organisations already hold the policies and training records the assertions ask for. What is missing is the mapping, not the material.

Suppliers assessed separately

Organisations in the supply chain get asked for DSPT status by commissioners, with no efficient way to demonstrate it.

How Celeredge helps

Your evidence, mapped to the assertions

Celeredge reads your policies, training records, registers and previous submissions, maps them to the toolkit's assertions, and separates what is genuinely absent from what simply was not linked.

  • Existing evidence mapped rather than re-collected
  • Every mapping cites the source document behind it
  • Genuine gaps separated from unmapped material and ranked
  • Re-runnable next year against the same evidence base
Healthcare solutions →
NHS DSPT, prepared from evidence you already hold in Celeredge

Questions

NHS DSPT assessment FAQ

Does Celeredge submit the toolkit for us?

No. The submission stays yours and is made by your organisation. Celeredge does the preparation: mapping evidence to assertions, and showing what is missing before you submit.

The toolkit changed. Which version is assessed?

The toolkit has been moving towards a Cyber Assessment Framework aligned structure, and the version that applies depends on your organisation type. Confirm your applicable version with us before you rely on a run, and the framework can be authored to match it.

We are a supplier, not a trust. Is this relevant?

Yes. Suppliers handling NHS patient data are routinely asked to evidence DSPT status by commissioners, and the preparation work is the same.

Prepare it from what you already have.

Map your existing evidence to the assertions before the annual deadline, not during it.