
What to Expect During Your First Pen Test
A founder's field guide to penetration testing, from a team that's run hundreds of them
Matt Jennings•Sep 08, 2026
What to Expect During Your First Pen TestRegistration and compliance for health and care providers
The Care Quality Commission (CQC) regulates providers of health and social care in England. If your service diagnoses or treats patients, you will need to register with the CQC and show that you are safe, effective, caring, responsive and well-led. Assuric gives you the policies, evidence and training tracking to get registered and stay ready for inspection, in one place your whole team can work from.
Request a demoCare Quality Commission Compliance
Every CQC assessment comes back to five key questions. Assuric structures your evidence around them so nothing gets missed.
Are people protected from abuse and avoidable harm? This one carries the most weight.
Does your care and treatment achieve good outcomes, based on the best available evidence?
Do staff involve people and treat them with compassion, dignity and respect?
Is your service organised so it meets the needs of the people who use it?
Do leadership, management and governance assure high-quality care?
We are trusted by
We can assist you with all aspects of CQC compliance, including:
A library of CQC policy templates written by our advisors. Concise enough to pass inspection, easy to make your own, and kept up to date as CQC requirements change so you are never working from an old version.
Generate Policy
Suggested
Safeguarding Policy
Adults and children, written by our advisors
Infection Prevention Policy
Reviewed against CQC guidance
Structure your evidence against Safe, Effective, Caring, Responsive and Well-led, with tasks referenced to CQC guidance throughout, so you always know what an inspector is looking for and where your gaps are.
Evidence by key question
Safe
24 evidence items
Effective
18 evidence items
Caring
12 evidence items
Responsive
9 evidence items
Well-led
3 gaps to close
Role-specific training checklists, read-and-acknowledge sign-offs and automated reminders, with a Registered Manager view of exactly who is compliant and who needs a nudge.
Staff training
Compliance across your team
Version control, approval workflows and locked approved versions, so you always have the sign-offs and version history inspectors ask for, without digging through shared drives.
Controlled documents
CQCSigned, versioned and locked
Key documents
Log and track complaints against CQC timelines, so acknowledgements and responses never slip past the dates you are held to.
Complaints log
Complaint 2024-031
Acknowledged day 1
Complaint 2024-032
Response sent day 12
Complaint 2024-033
Response due in 6 days
Pull your evidence together quickly when an inspection is announced, with everything mapped, owned and up to date rather than scattered across the team.
Inspection evidence pack
Safe
Well-led
Work with advisors who know the CQC inside out, from your initial registration through to your first inspection and beyond.
Hi Rosie 👋
How can we help?
Send us a message
Ask about your inspection
Get in touch if we haven’t answered your question below, we are always happy to help!
The Care Quality Commission is the independent regulator of health and social care in England. It registers providers, sets standards and inspects services to make sure they are safe and good quality.
If your service involves diagnosing or treating patients, for example a clinician-led digital clinic or an online pharmacy dispensing treatment, you will usually need to register. Some services are exempt, and some technology products reach the market by partnering with a CQC-registered organisation rather than registering themselves. If you are not sure which applies to you, book a call and we will point you in the right direction.
The CQC assesses services against five key questions: is it safe, effective, caring, responsive and well-led? Safe carries particular weight, so it is the area to get right first. Assuric structures your evidence around these five so nothing gets missed.
The CQC does not publish a single mandatory training list, which is part of what makes it hard. Providers generally benchmark against NHS mandatory training, and your Safeguarding Lead and Registered Manager are expected to hold higher-level safeguarding training. Assuric tracks all of it and reminds people before anything lapses.
It varies by service type and risk, and the CQC has been moving to a more continuous, evidence-led approach rather than fixed-interval visits. The practical answer is to stay ready all the time, which is exactly what the platform is built for.
Compliance is complex, but our AI tools simplify it. Discover features to stay ahead of regulations.
Kelly Klifa
CEO at Heim
Assuric has been transformative for Heim as we looked to achieve DCB0129 and DTAC compliance. The platform is easy to use, and the AI tools and automated reminders make previously dreaded compliance tasks a breeze. Paul and Matt supported us every step of the way.
Katie Baker
Director UK & Ireland at Tandem
Assuric has been fantastic in helping us quickly and safely navigate regulatory compliance in the UK. From completing Cybersecurity requirements to DSPT, DCB0129, and DTAC, the team was supportive, extremely knowledgeable, and the platform made everything quick and straightforward. A separate regulatory company we consulted at the beginning even remarked on how quickly we achieved compliance!
Maks Kozarzewski
COO at VitVio
We couldn't speak highly enough of both the Assuric team and the platform itself, which is incredibly easy to use, and with the skill and hardworking nature of the Assuric team. They've been a key component in accelerating our progress and deployments!
Maja Mazur
CEO at Healthnix
Assuric has been such a blessing in getting our DTAC and GDPR compliance done - completing all the documentation and deciding what needs to be done whilst running the business is very hard, but the team really helped us through that. The platform is easy to use, helps keep track of things and it even allows us to coordinate all the team training easily. Highly recommend them!
Dean Mawson
Clinical Director at DPM
Assuric streamlines the process of achieving and maintaining compliance with DCB0129 standards for digital health technologies. The user-friendly interface simplifies collaboration across multidisciplinary teams, while the built-in templates and workflows save significant time and effort during compliance projects. Assuric’s ability to centralise documentation and provide real-time visibility into project progress is particularly beneficial for Clinical Safety Officers and digital project teams, enhancing both efficiency and assurance.

A founder's field guide to penetration testing, from a team that's run hundreds of them
Matt Jennings•Sep 08, 2026
What to Expect During Your First Pen Test
Learn what CQC compliance is, who needs to register, how CQC inspections work, what evidence you'll need, and how to prepare for registration and inspections.
Dr Johnny Andrews,Cordi Mahony•Jul 24, 2026
CQC Compliance Explained: the Clinical Governance EssentialsGoodbye manual processes, hello automation. Let Assuric manage compliance and security, so you can focus on growth.
