Secure Clinical Video for NHS Trusts
For NHS and university procurement teamsÂ
March 2026
Videolab is a purpose-built, GDPR-compliant platform for video recording, sharing, and structured assessment in clinical skills training. Codific BV is a Belgian-registered software company with no UK establishment. The contracting institution acts as data controller; Codific acts as data processor. All data remains within the institution’s dedicated instance.
Compliance credentials
Information Security
ISO/IEC 27001:2022
Certified October 2025
Third-party pentest early 2026: 0 critical, 0 high findings
NHS DSPT Alignment
Self-assessed & documented
Alignment statement available on request · Portal registration pending DSPT helpdesk guidance for non-UK suppliers
Cyber Essentials
Certification in progress
ISO 27001:2022 covers overlapping controls · CE certification planned 2026
Data security controls
AES-256 encryption at rest; TLS in transit with A+-grade SSL and HSTS
On-device video encryption within seconds of recording stop
Role-based access control (RBAC) across all functions
Automated retention and deletion — institution-configured at deployment
Institution-specific instances — no shared multi-tenant environment
AWS infrastructure · UK hosting region available on request
No advertising · No data monetisation · No third-party sharing
Data Processing Agreement signed with every institution
Breach notification within 72 hours per UK GDPR Article 33
DSPT key assertions — status
AREA
CONTROL
STATUS
1.1
ICO registration
MET
1.2
DPA with all controllers
MET
2.1
Processing within contracted scope
MET
3.1 - 3.2
InfoSec policy & risk management
MET
4.1 - 5.2
Access control & authentication
MET
5.1 - 5.2
Encryption & secure config
MET
6.1
Vulnerability & patch management
MET
7.1 - 7.2
Breach detection & incident response
MET
8.1
Retention & secure deletion
MET
9.1
Staff data security training
MET
10.1
Subprocessor management
MET
Full DSPT alignment statement with evidence references available on request.
Compliance enquiries
ICO register
ico.org.uk  · ZC103901
Platform
videolab.eu
Subprocessors
AWS EMEA SARL  · Codific Ltd. (BG102075166)