Trust
Security and data handling
You evaluate vendors for a living. This page pre-answers the questionnaire, including the questions information governance asks in an NHS review. Statements marked in progress are pending legal confirmation of dates and artefacts.
You own your operational data. Aggregate anonymised learning is required to use the product.
Hosting
Private tenant on AWS eu-west-2 (London). Production workloads and customer data stay in that region unless a written agreement says otherwise.
Certification
Cyber Essentials: held. ISO 27001: in progress (target: Q4 2026). Cyber Essentials Plus: in progress (target: Q4 2026). We will not claim certifications we do not hold.
NHS-specific
DSPT (Data Security and Protection Toolkit): status to be confirmed with each Trust engagement; we support the evidence pack your IG lead needs. DTAC (Digital Technology Assessment Criteria): in progress for NHS deployments. Their absence on a vendor site usually means the vendor has not done this before; we name them because we expect the questions.
Data protection
We support DPIA work with your information-governance team. A data-sharing agreement is available. You are the data controller for personal data you put into UpTrade; Enscypher AI acts as processor for that data. Access to production systems is role-based and logged.
Encryption and access
TLS 1.2+ in transit. Encryption at rest on our cloud infrastructure (AES-256, provider-managed). Tenant isolation; operators do not browse your spend for unrelated purposes.
What we collect
Operational purchase data needed to run the service: requests, catalogue and policy configuration, options presented, decisions and rationale, and related audit events. Account and contact details for authorised users. We do not need clinical free-text beyond what your staff enter to describe a need.
What leaves the tenant
Your identifiable operational records stay in your tenant. We do not sell customer datasets. Subprocessors (cloud infrastructure and operational tooling) process data under data-processing agreements; a current list is available on request during diligence.
What “anonymised” means
Anonymised means stripped of organisation identifiers, site names, personal names, and free-text that could re-identify a Trust or plant before any aggregate use. It is not a synonym for “we keep a copy of your ledger.” Aggregate patterns (for example category-level price bands across many customers) may feed the platform knowledge base. That aggregate learning is part of how the product improves and is required to use UpTrade: there is no opt-out that keeps the product while excluding aggregate anonymised learning. You still own your operational data; the trust owns its data.
Retention and deletion
We retain operational data for the life of the customer agreement and applicable legal holds. On contract end, we delete or return customer data according to the agreed schedule. Authorised deletion requests are handled within contractual SLAs.
Honest answers
Have you deployed in any NHS trusts?
No. We offer a structured, no-cost pilot with defined exit criteria, one department, one category, so IG and finance can evaluate the product against your baseline before any wider rollout.
What average savings has UpTrade realised?
We do not quote a savings percentage. The mechanism is catalogue price gap, repeat-buy consolidation, multi-site aggregation and supplier competition. We measure those against your numbers in the pilot.
Ready to run a controlled pilot? Start a pilot.