Governance and policies
Governed like a supplier should be
The facts a procurement lead, an information governance reviewer or an assessor asks for, on one page, with the documents behind them.
The company
Registered details
- Legal namePOCTIFY LTD
- Registered inEngland and Wales, company number 16340235
- Incorporated25 March 2025
- Registered office4 Skyline House, Dickens Yard, Longfield Avenue, London W5 2BJ
- Companies HousePublic record
- Contactinfo@poctify.com
Certifications and registrations
What we hold
Cyber Essentials
Certified June 2026, whole organisation scope, under the UK National Cyber Security Centre scheme. Renewed annually.
ICO registration
POCTIFY LTD is registered with the Information Commissioner's Office as a data controller. Processing is described in our privacy policy.
Data Security and Protection Toolkit
Standards Met against DSPT version 9, the NHS self-assessment of data security and protection that NHS organisations require of suppliers handling their information. Reassessed every year.
Supplier readiness
Purchase orders, 30 day terms and new supplier forms as standard. We prepare DTAC evidence for our own products and help other suppliers prepare theirs.
Policies
Statements and policies
Information security
Company devices are managed and encrypted, access is role-based with multi-factor authentication, production data is held in UK and EU regions, and security is reviewed at least annually against Cyber Essentials. Incidents affecting client data are reported to the client without undue delay and to the ICO where the law requires.
Quality
Course and guide content is written against named standards (ISO 15189:2022, MHRA guidance, CLSI protocols), reviewed by a clinical scientist before publication and revisited when a cited document changes. Corrections are made on the page and dated.
Clinical safety position
POCTIFY software is workflow, quality and record-keeping software. It does not interpret clinical results and provides no clinical decision support. Clinical interpretation remains with the responsible clinician; analytical performance remains with the device manufacturer.
Environment and social responsibility
A small, largely remote company with no manufacturing. We favour digital delivery over travel, publish free education for the whole POCT community, and support point of care education in under-served regions.
Equality and conduct
We recruit and contract on merit, screen partners against the UK sanctions list where the law requires, and expect plain dealing from everyone who represents POCTIFY.
Documents
- Privacy policy
- Terms of business
- NHS purchase orders and supplier forms
- Cyber Essentials certificate, DSPT assessment reference and insurance schedule: available on request to info@poctify.com.
