Care data deserves serious protection.
CareBob holds some of the most sensitive information a provider has — care records, medication, HR files and immigration evidence. This page explains, plainly, how it is protected today and what we are still working on.
- App in London · data in the EU
- Encrypted in transit and at rest
- Role-based access
- Audit trail of key actions
Controls built into the product.
These are how CareBob works today — not optional extras.
Hosting & data location
The CareBob application runs in London, and your organisation's data is stored in the EU.
Encryption
All traffic to CareBob is encrypted in transit over HTTPS, and data and uploaded files are encrypted at rest by our hosting providers.
Role-based access
Carers, managers, HR and administrators each have a role. What a person can see and do is decided by that role — checked on the server, not just hidden on screen.
Separated by organisation
Every record belongs to one organisation. Each request is checked on the server against the signed-in person's organisation, so each provider sees only its own data.
Audit trail
Key actions — care records, medication, rota changes, approvals and sponsor-compliance decisions — are recorded with who did what and when.
Carer phones & offline
Carers use CareBob in the browser. Only clock-in, clock-out and handover notes can wait offline, and a queued item can only be sent by the carer who created it.
Where we are, honestly.
We only show a standard as met once it is. Here is our current status.
- Built in
UK GDPR
CareBob is designed around UK GDPR: least-privilege access by role, organisation-level separation and an audit trail of key changes to records.
- In progress
NHS Data Security and Protection Toolkit (DSPT)
We are working through the DSPT standards. We will publish our status here once our assessment is submitted.
- In progress
Cyber Essentials
Our Cyber Essentials certification is in progress. We will update this page when it is awarded.
- On request
Data processing agreement & sub-processors
A data processing agreement and our current list of sub-processors are available to customers and prospective customers on request.
Questions, a security review, or a concern to report?
We’re happy to answer security questionnaires, share our data processing agreement and sub-processor list, or walk your team through how CareBob handles data.
hello@carebob.co.uk
Ready to see CareBob in action?
Book a walkthrough with our team and see how CareBob fits the way your organisation already works.