Legal and assurance
How Viewee protects data and prepares for assurance.
Draft policies, agreements, audit plans and compliance working documents published for transparency. These remain under review until formally approved.
Policies
Security
Draft
Viewee resilience pack: Backup & Restore Policy and Incident Response Plan
Read document →
DraftRecommendation at a glance
Read document →
DraftViewee penetration testing options and recommended plan
Read document →
DraftCyber liability insurance for Viewee
Read document →
DraftISO 27001 - prep
Read document →
DraftCyber Essentials - prep
Read document →
DraftISO 27001 - Requirements
Read document →
DraftCyber Essentials - Requirements
Read document →
Assurance
Draft
Decision statement
Read document →
DraftCertifications: ISO 27001, Cyber Essentials Plus and NHS assurance - path to each
Read document →
DraftNHS and care data standards: what applies to Viewee, the "set fields" question, and API readiness
Read document →
DraftWCAG 2.2 AA - Audit Plan + Checklist
Read document →
DraftWCAG 2.2 AA - First-Pass Audit (Pre-Deployment)
Read document →
DraftDSPT (Data Security and Protection Toolkit) - Analysis for Viewee
Read document →
DraftPECR - Requirements
Read document →
DraftNHS DSPT - Requirements
Read document →
DraftUK GDPR + DPA 2018 - Requirements
Read document →