
What to Expect During Your First Pen Test
A founder's field guide to penetration testing, from a team that's run hundreds of them
Matt Jennings•Sep 08, 2026
What to Expect During Your First Pen TestGet registered, and stay inspection-ready
If you provide regulated health or social care services in England, you may need to register with the CQC and demonstrate that your service is safe, effective, caring, responsive and well-led. We help you achieve and maintain CQC compliance with policies, evidence, training and audit-ready documentation in one place, alongside clinical safety, information governance and other compliance requirements.
What the CQC expects
Registration
Staying inspection-ready
Every CQC assessment comes back to five key questions. Assuric structures your evidence around them so nothing gets missed.
Are people protected from abuse and avoidable harm? This one carries the most weight.
Does your care and treatment achieve good outcomes, based on the best available evidence?
Do staff involve people and treat them with compassion, dignity and respect?
Is your service organised so it meets the needs of the people who use it?
Do leadership, management and governance assure high-quality care?
Tell us about your service and we will help you work out whether the CQC applies to you, and what you need to do next.
We are trusted by
We can assist you with all aspects of CQC compliance:
A library of CQC policy templates written by our advisors, concise enough to pass inspection and easy to make your own. We keep them current as requirements change.
Generate Policy
Suggested
Safeguarding Policy
Written by our advisors
Consent and Mental Capacity Policy
Reviewed against CQC guidance
Everything you gather maps to Safe, Effective, Caring, Responsive and Well-led, so when an inspector asks, you know exactly where to look.
Evidence coverage
Across the five key questions
Role-based training, read-and-acknowledge sign-offs and automated reminders, with a clear view for your Registered Manager of who is compliant and who is not.
Registered Manager view
Clinical team
8 of 8 compliant
Operations team
5 of 6 compliant
New starters
Induction in progress
Track complaints against the timelines you are held to, so acknowledgements and responses happen on time, every time.
Complaints
Response timelines
Version control, approvals and a full audit trail, so you always have the sign-offs and history an inspector expects.
Controlled documents
CQCSigned, versioned and locked
Key documents
If you also handle data protection, clinical safety or GDPR, manage it all on Assuric. One source of truth, and a much clearer picture for whoever owns compliance overall.
One source of truth
Your compliance workspace
Everything in one place
CQC
On trackGDPR
On trackClinical safety
On trackWork with advisors who know the CQC well, from registration through to inspection.
Ask an advisor
You
We are registering a new online clinic. What should we do first?
Assuric
Start with your statement of purpose and Registered Manager application. We will set both up with you.
Compliance is complex, but our AI tools simplify it. Discover features to stay ahead of regulations.
Kelly Klifa
CEO at Heim
Assuric has been transformative for Heim as we looked to achieve DCB0129 and DTAC compliance. The platform is easy to use, and the AI tools and automated reminders make previously dreaded compliance tasks a breeze. Paul and Matt supported us every step of the way.
Katie Baker
Director UK & Ireland at Tandem
Assuric has been fantastic in helping us quickly and safely navigate regulatory compliance in the UK. From completing Cybersecurity requirements to DSPT, DCB0129, and DTAC, the team was supportive, extremely knowledgeable, and the platform made everything quick and straightforward. A separate regulatory company we consulted at the beginning even remarked on how quickly we achieved compliance!
Maks Kozarzewski
COO at VitVio
We couldn't speak highly enough of both the Assuric team and the platform itself, which is incredibly easy to use, and with the skill and hardworking nature of the Assuric team. They've been a key component in accelerating our progress and deployments!
Maja Mazur
CEO at Healthnix
Assuric has been such a blessing in getting our DTAC and GDPR compliance done - completing all the documentation and deciding what needs to be done whilst running the business is very hard, but the team really helped us through that. The platform is easy to use, helps keep track of things and it even allows us to coordinate all the team training easily. Highly recommend them!
Dean Mawson
Clinical Director at DPM
Assuric streamlines the process of achieving and maintaining compliance with DCB0129 standards for digital health technologies. The user-friendly interface simplifies collaboration across multidisciplinary teams, while the built-in templates and workflows save significant time and effort during compliance projects. Assuric’s ability to centralise documentation and provide real-time visibility into project progress is particularly beneficial for Clinical Safety Officers and digital project teams, enhancing both efficiency and assurance.

A founder's field guide to penetration testing, from a team that's run hundreds of them
Matt Jennings•Sep 08, 2026
What to Expect During Your First Pen Test
Learn what CQC compliance is, who needs to register, how CQC inspections work, what evidence you'll need, and how to prepare for registration and inspections.
Dr Johnny Andrews,Cordi Mahony•Jul 24, 2026
CQC Compliance Explained: the Clinical Governance EssentialsGoodbye manual processes, hello automation. Let Assuric manage compliance and security, so you can focus on growth.
