NHS DSPT assessment
NHS DSPT, prepared from evidence you already hold
The Data Security and Protection Toolkit is an annual self-assessment, and the work is almost entirely evidence gathering. Celeredge reads what you have, maps it to the assertions, and shows what is genuinely missing.
From $59 per seat / month, after a 7-day free trial. Preparation support for your own submission, not a submission service or an assurance opinion.
The problem
Where DSPT submissions lose time
An annual scramble
The toolkit is a once-a-year event, so the evidence gathering restarts from scratch every year and always lands against a deadline.
Evidence exists but is not mapped
Most organisations already hold the policies and training records the assertions ask for. What is missing is the mapping, not the material.
Suppliers assessed separately
Organisations in the supply chain get asked for DSPT status by commissioners, with no efficient way to demonstrate it.
How Celeredge helps
Your evidence, mapped to the assertions
Celeredge reads your policies, training records, registers and previous submissions, maps them to the toolkit's assertions, and separates what is genuinely absent from what simply was not linked.
- Existing evidence mapped rather than re-collected
- Every mapping cites the source document behind it
- Genuine gaps separated from unmapped material and ranked
- Re-runnable next year against the same evidence base

Explore more
Related to NHS DSPT
Questions
NHS DSPT assessment FAQ
Does Celeredge submit the toolkit for us?
No. The submission stays yours and is made by your organisation. Celeredge does the preparation: mapping evidence to assertions, and showing what is missing before you submit.
The toolkit changed. Which version is assessed?
The toolkit has been moving towards a Cyber Assessment Framework aligned structure, and the version that applies depends on your organisation type. Confirm your applicable version with us before you rely on a run, and the framework can be authored to match it.
We are a supplier, not a trust. Is this relevant?
Yes. Suppliers handling NHS patient data are routinely asked to evidence DSPT status by commissioners, and the preparation work is the same.
Prepare it from what you already have.
Map your existing evidence to the assertions before the annual deadline, not during it.