
Compliance Frameworks
Frameworks

Cyber Essentials
Cyber Essentials certification scheme

DCB0129

NHS Digital Clinical Safety for Manufacturers
Joy Connect Lite Hazard Log
Published hazard log for Joy Connect LiteJoy CMS Hazard Log
Published hazard log for Joy CMSJoy Connect Hazard Log
Published hazard log for Joy Connect including Joy Chat, Joy Healthcheck, and Joy NotesClinical Risk Management System
Clinical Safety Case Report - Joy Universal
Clinical Safety Case Report - Joy Connect
Clinical Safety Case Report - Joy CMS
Clinical Safety Case Report - Joy Chat
Clinical Safety Case Report - Joy Healthcheck
JoyConnect and JoyCMS - DCB0160 - Template - CSCR
DCB0160 Clinical Safety Case Report
DSPT

NHS Data Security and Protection Toolkit (Category 3 Organisation / Other)
DPIA - Joy Connect and CMS
Data Protection Impact Assessment - Aug 2025DPIA - Joy NHS Health Checks
DPIA - Joy Connect, CMS and Notes
Data Protection Impact Assessment - Aug 2025Joy - Incident Management
Joy Penetration Test Report (July 2025)
Joy Penetration Test Report (June 2024)

DTAC

NHS Digital Technology Assessment Criteria (v2)
DTAC - Dec 2025
Data flows
User Journey

GDPR
General Data Protection Regulation
Data Processing Agreement - JoyConnect
Data Processing Agreement - JoyConnect and JoyNotes

ISO 27001:2022


Information Security Management Systems

Class I SaMD (UK MDR)

Class I (low risk) SaMD (UK MDR, MHRA)
UK Declaration of Conformity