Your governance data, protected
You're trusting us with sensitive workforce and governance information. CareCentral is built security-first — and the same integrity that protects your data is what makes your evidence defensible.
Data residency
Your data stays in the UK.
- UK-hosted infrastructure
- No data stored outside the UK/EEA without your agreement
Encryption
Protected in transit and at rest.
- TLS for all data in transit
- Encryption at rest for stored data
- Secrets never exposed to the browser
Tenant isolation & access
One organisation can never see another's data.
- Row-level security on every table
- Strict organisation-level data isolation
- Role-based access (senior manager / manager / staff)
Audit & integrity
The record itself is defensible.
- Append-only, immutable audit trail
- Actions attributable to a real user
- Evidence PDFs are immutable once generated
Resilience
Built to recover.
- Automated backups
- Point-in-time recovery
- Disaster-recovery procedures
Compliance
Aligned to care-sector expectations.
- UK GDPR & special-category data handling
- Data Processing Agreement available
- DSPT & Cyber Essentials — in progress
Items marked “in progress” are being pursued and are not yet certified. We'll never claim a certification we don't hold.
For your procurement & IG team
We can provide a Data Processing Agreement, our sub-processor list and answers to your security questionnaire on request. Reach us at admin@carecentral.app.
Talk to us about security & data.
Preparing a security review? We're happy to share our DPA, sub-processor list and answers to your questionnaire.
30 minutes · no obligation · a UK team who know care