NHS data security standards, met before the pilot opened

In March 2026, before the pilot opened to external users, ClinLexis Ltd published its assessment on the NHS Data Security and Protection Toolkit register with the status Standards Met. The DSPT is the assurance framework NHS organisations use to judge the data-security posture of their suppliers, covering the National Data Guardian’s ten data security standards across personal confidential data handling, staff responsibilities and technical security.

The sequencing was deliberate. The platform handles medical records, so NHS-grade assurance was treated as a precondition of inviting the first clinician in.