Groundwork

Primary care and care providers

NHS data security and UK GDPR, in days, not weeks.

Complete your NHS Data Security and Protection Toolkit (DSPT), privacy notices, and UK GDPR documents in days rather than weeks. Built for care teams with no compliance background, so you can focus on care instead of paperwork.

See how it works

Why compliance takes weeks away from patient care

Primary care and care providers are asked for the same NHS Data Security and Protection Toolkit (DSPT) and UK GDPR evidence every year, but most tools are built for hospital IT departments.

  • £3,000+ quotes and hospital-sized templates.

    Consultants and compliance platforms charge thousands of pounds for generic templates written for a hospital, leaving a manager with no compliance background to work out what applies.

  • Weeks lost translating compliance jargon.

    Instead of clear guidance, you are handed blank forms for data processing records, equipment lists, and policies. That work pulls you away from running your service.

  • No clarity on what needs doing and when.

    A folder of files never tells you what belongs in each list, or reminds you when annual reviews, staff training checks, and NHS DSPT evidence are due.

  • Endless updates you do not have the staff or time for.

    When clinical software, a supplier, or a staff role changes, multiple policies, privacy notices, and logs go out of date. Without someone dedicated to compliance, keeping every file updated by hand is impossible to sustain.

How it works

A chat-based AI agent

Groundwork drafts your documents, updates them when something changes, and collects evidence from the tools you connect. You can edit any document yourself. Nothing is published until you approve it.

  • Self-serve by default

    Run it yourself in chat, with the checks built in.

  • Expert help when you need it

    Guided setup, document import, and a review with our team when you want someone alongside you.

  • Clinical safety officer

    A registered clinician to review and approve the clinical safety case NHS DTAC asks for, and the hazard log. You pay for that review, not a drafting project.

The documents you get

One set of documents, sized to your organisation and the rules you need to meet. Describe a change in chat, and Groundwork proposes the same edit across every policy, list, and log that mentions it.

  • Policies and privacy notices

    Privacy notices and information security policies written for how your service actually works.

  • Registers and logs

    Lists of the personal data you handle, the suppliers and software you use, and the risks you track.

  • Staff reading and regular reviews

    Staff can record that they have read and understood a document, and a task list tracks reviews, audits, and submissions.

  • Customer- and auditor-ready PDFs

    Clean PDFs with a version number and a history of who approved each change, ready to send to the NHS body that funds your service, or to an auditor.

Frameworks

Complete and keep up to date your core privacy, security, and NHS requirements in days rather than weeks.

  • NHS DSPT

    NHS England · Security & privacy

  • UK GDPR & DPA 2018

    UK · Privacy

  • Cyber Essentials v3.3

    UK · Security

How the options compare

Most compliance options charge thousands a year before you have documents you can send. Groundwork gives you the requirements, built-in checks, and an AI editor directly.

  1. Traditional consultancies

    £8,000 to £25,000+

    You + Consultants

    Pay thousands for meetings and generic templates, handed back weeks later as files that do not update themselves.

  2. AI-assisted consultancies

    £3,000 to £12,000+

    You + Consultants + A little AI

    Yearly subscriptions for interactive web based platforms with AI assistance.

  3. Groundwork

    Self-serve

    You + AI Agent + Consultants (optional)

    Use an AI agent to draft, understand, approve, and use your own compliance documents in hours, then keep them up to date effortlessly.

Questions

How Groundwork drafts, checks, and keeps your policies and records up to date.

Does the AI publish documents on its own?

No. It writes drafts. You save a record or a log, or send a policy for approval. Nothing goes live until you, or the right person on your team, approves it.

Do I need compliance experience to use Groundwork?

No. Groundwork is built for small teams with little or no compliance background. It drafts from your setup, explains what belongs in each list or log, and shows what needs doing and when.

Can I send a document to an auditor or a customer?

Yes. Any published version exports as a clean PDF, with its version number and a history of changes, ready to send to a customer, an NHS buyer, or an auditor.

Make NHS data security and UK GDPR straightforward.

Complete your NHS Data Security and Protection Toolkit (DSPT), privacy notices, and UK GDPR documents in days rather than weeks, so your team can focus on patient care instead of paperwork.