Ivo Health logo

Ivo Health

|Trust Centre

Ivo Health is highly committed to assurance, trust, privacy and governance.

Compliance

View all
DSPT
Cyber Essentials Plus
GDPR
DCB0129
DTAC
DCB1596
ISO 27001

Resources

View all

Certificates

3 resources available

Other Resources

1 resource available

Hazard Logs

1 resource available

Subprocessors

View all
Azure

Hosts the Ivo Coordinate platform and stores its data in the UK

FireText

FireText

DPAPrivacy

Ivo Health uses Firetext to send 2FA codes to staff

Datadog

Datadog

DPAPrivacy

Holds technical logs used to monitor and secure the platform. Logs do not contain patient-identifiable information.

Scaleway

Scaleway

DPAPrivacy

Ivo uses Scaleway to send emails to staff (confirmation, password reset, change of 2FA method etc).

We are the manufacturer of Ivo Coordinate and follow the NHS clinical safety standard DCB0129. Our Clinical Safety Officer approves our clinical risk management plan, hazard log and clinical safety case report. We check every change to the product for clinical risk before release. Changes that affect clinical risk need the Clinical Safety Officer’s approval. We share our safety documents with you to support your own DCB0160 assessment.

We do not consider Ivo Coordinate to be a medical device. It helps teams coordinate referrals, visits and tasks. It does not diagnose or treat, and it does not use artificial intelligence. Clinicians make all clinical decisions, and your electronic health record remains the main clinical record. Where Ivo calculates a NEWS2 score, it shows the observations behind it so clinicians can check it.

Ivo Coordinate is hosted on Microsoft Azure in the UK. Each trust’s data is kept separate. Only your staff and named Ivo Health support staff can use the product. Patients, carers and families cannot. Staff can sign in with NHS Care Identity Service 2 (CIS2), so their access ends when they leave your trust. We act as a data processor for your trust under a data processing agreement, and we have completed a data protection impact assessment (DPIA).

The mobile app works offline. Visit data is stored on the device in an encrypted database that only opens with the clinician’s fingerprint or face. The app shows when it last synced and warns staff before they log out with unsent changes. If something could affect patient safety, our Clinical Safety Officer assesses it, and only they can close it. We update our hazard log and share relevant findings with your trust.