The Digital Technology Assessment Criteria for health and social care (DTAC) give healthcare providers, patients and citizens confidence that the digital health tools they use meet clinical safety, data protection, technical security, usability and accessibility standards. DTAC brings together UK legislation and good practice to form the national baseline for digital health technologies entering the NHS and social care.
CyberLiver's DMx Digital Medicine Platform has completed DTAC assessment. Independent evaluation of our clinical safety position under DCB0129 was verified by ORCHA.
We are compliant with the DCB0129 standard for Clinical Risk Management for Health IT, having assessed and mitigated safety hazards relating to the CyberLiver platform. Our approach is underpinned by our Clinical Risk Management Plan and documented in our Clinical Safety Case Reports, and our appointed Clinical Safety Officer maintains and approves the clinical hazard log. Our independently verified DCB0129 position supports a deploying organisation's own DCB0160 assessment.
CyberLiver's Digital Medicine Platform is a configurable, modular Software as a Medical Device (SaMD) for the monitoring and management of patients across a range of conditions. It is a UKCA-marked Class IIa medical device with FDA Breakthrough Device designation. We hold a Declaration of Conformity and are registered with the MHRA.
We have met the standards of the NHS Data Security and Protection Toolkit (DSPT), achieving a "Standards Met" outcome for 2025-26 (published 30 June 2026). We have a Data Protection Officer in place and are registered with the Information Commissioner's Office. Data is hosted in secure UK-region data centres, and our security is maintained under our ISO 13485:2016 quality management system, supported by Cyber Essentials certification. We process all data in accordance with UK GDPR and the Data Protection Act 2018.
The platform is built on open healthcare interoperability standards, implemented once at the platform layer. It supports HL7 FHIR UK Core and implements SNOMED CT clinical terminology, enabling structured exchange with compatible EPR and population health systems.
Security is tested through penetration testing, vulnerability scanning, DSPT annual assessment and internal audit under our ISO 13485:2016 quality management system, with findings tracked to resolution.
Formal usability engineering was conducted in accordance with IEC 62366, and our platform is designed with regard to the Web Content Accessibility Guidelines (WCAG) version 2.2, level AA. See our accessibility statement for details.