Compliance frameworks followed by Log my Care

Founded in 2017

Welcome to the Log my Care Trust Centre

At Log my Care, safeguarding the confidentiality, integrity, and availability of the data entrusted to us is fundamental to our mission and the trust our partners place in us.

We know that choosing a care management platform is about more than just features — it’s about trust. That’s why we’re committed to being transparent about our security practices, responsibilities, and the tools we use to protect the sensitive information shared with us.

This Security Posture outlines our approach to identifying and mitigating risks, adopting industry best practices, and continuously strengthening our systems to keep your data safe. We are proud of the steps we take — and continue to take — to ensure our platform remains a secure and reliable choice for care providers.

Founded in 2017

Compliances (6)

Here are the compliance frameworks that Log my Care follows which showcases our adherence to industry-standard security guidelines and practices.

ISO 27001

Compliant

The internationally recognised standard for establishing, implementing, and continuously improving an Information Security Management System (ISMS). Achieving this demonstrates a deep commitment to protecting data through structured risk management, security controls, and continual improvement.

Cyber Essentials Plus

Compliant

Cyber Essentials Plus is a UK government-backed certification that provides a higher level of assurance than the basic Cyber Essentials. It involves independent hands-on technical testing to confirm robust protection against the most common cyber threats.

NHS Assured Supplier

Compliant

Log my Care is listed as an NHS Assured Supplier as part of the Digitising Social Care programme, which means our platform meets the technical, data protection, and cyber security standards required for use in adult social care settings. This assures providers that we’re a trusted digital partner for delivering safe, effective care.

GDPR

Compliant

The General Data Protection Regulation, a comprehensive data protection law in the EU, governs how organizations must protect personal data and privacy.

PRSB

Compliant

The Professional Record Standards Body (PRSB) sets national standards for how health and care information should be recorded and shared. These standards help ensure that care records are person-centred, high-quality, and interoperable across services.

Log my Care supports two PRSB standards: the About Me and the Care and Support Plan Standard, helping ensure that important personal details and care plans are recorded in a way that is consistent, meaningful, and shareable across health and social care.

DSPT

Compliant

The Data Security and Protection Toolkit (DSPT) is a requirement for organisations in adult social care that access or process NHS data. By meeting DSPT standards, Log my Care demonstrates that we handle information in line with data protection legislation, follow good practice for information governance, and keep care recipients’ data safe, secure, and confidential.

Create your own Trust Center | Powered by