Security & Trust
Protecting the information entrusted to CareUnveil
CareUnveil is designed to help care organisations manage sensitive information securely. Security, privacy and responsible access to information are important parts of how we design and operate our services.
Last updated: 6 October 2026
Our approach to security
Care organisations may use CareUnveil to manage sensitive information about service users, staff and care delivery. We recognise the responsibility that comes with processing this information.
We use a combination of technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration or disclosure. We regularly review our security practices as CareUnveil and the threats facing digital services evolve.
Data protection
Protecting care information
CareUnveil may process personal information and special category information, including health information, on behalf of care organisations.
Where a care organisation uses CareUnveil to manage care information, that organisation will usually act as the data controller and CareUnveil will act as its data processor.
We apply access controls and other safeguards designed to ensure that information is available only to authorised users and is handled in accordance with applicable data protection requirements and our contractual obligations.
Read our Privacy PolicyAccess control
Access based on responsibility
CareUnveil provides role based access controls that allow organisations to manage what different users can access and do within the platform.
Organisations are responsible for managing their users and assigning appropriate access. CareUnveil also applies controls to administrative and infrastructure access used to operate the service.
Secure development
Security throughout development
Security is considered throughout the development and maintenance of CareUnveil. Changes are tested before being released, and we use development and review processes designed to identify problems before they reach production.
We also maintain and update the software components and dependencies used by CareUnveil and investigate relevant security issues when they are identified.
Security assurance
Building independently verified security
Cyber Essentials Plus
Care Unveil Ltd is currently working towards Cyber Essentials Plus certification as part of our ongoing security and assurance programme.
We will update this page as our security assurance and certification activities progress.
Incident management
Responding to security incidents
We maintain processes for identifying, investigating and responding to security incidents affecting CareUnveil.
Where an incident affects personal information, we will work with affected customers and take appropriate action in accordance with our contractual and legal obligations.
Security concerns
Report a security concern
If you believe you have identified a security issue affecting CareUnveil, please contact us using our contact form. Providing clear information about the issue will help us investigate it as quickly as possible.