Patient data stays with the hospital.
Talipes Tracker is designed so identifying details can only be read by the treating team. Not by other centres, and not by us.
Who is responsible for what.
Your hospital is the data controller. It decides who sees its patients, adds and removes its own staff, and sets how long records are kept.
Talipes Tracker is the data processor. We run the platform under a data processing agreement with each hospital, and only act on the hospital's instructions.
Regional and national views only ever show totals. Patient-level records never leave the centre that created them.
Protections and assurance.
Talipes Tracker is in development. This is what we are building and the assurance we are preparing, with its current status.
| Encryption on the deviceIn preparation | Names, NHS Numbers and full dates of birth are encrypted on the clinician's screen before saving, using keys held by the hospital. |
|---|---|
| Hospital-controlled accessIn preparation | Each hospital has at least two administrators who manage their own users and roles. |
| Multi-factor sign-inIn preparation | Every user signs in with a second factor. Sessions time out automatically. |
| Audit trailIn preparation | Every view, edit and export of a patient record is logged in a record that can't be altered. |
| UK hostingIn preparation | Data stored and processed on UK infrastructure, with point-in-time backups. |
| Data Security and Protection ToolkitIn preparation | Annual NHS assessment for suppliers handling NHS patient data. |
| DTACIn preparation | The NHS Digital Technology Assessment Criteria, completed for procurement teams. |
| Clinical safety (DCB0129)In preparation | Clinical risk management file and a named Clinical Safety Officer. |
| Cyber Essentials PlusIn preparation | Independently tested security certification. |
| Penetration testIn preparation | Independent test before the first real patient record is entered. |
Two ways to identify patients.
Each hospital chooses. Initials mode uses a patient ID made from initials, date of birth and a local number.
Full identity mode adds names and NHS Numbers, encrypted on the device so only your team can read them. Hospitals can switch once their information governance team is satisfied.
Independent of any manufacturer.
Talipes Tracker is an independent service. It isn't owned by, or affiliated with, any brace or boot manufacturer.
We never sell data, and we never share it with manufacturers. Brace type is recorded so your centre can see its own results, and appears in benchmarking only as anonymised totals.
Using it on personal phones.
Many clinics don't have department phones. Whether staff can use their own is decided by each hospital's bring-your-own-device policy.
- It runs in the browser. Patient data, notes and photos are never saved on the phone.
- Nothing downloads to a personal device, so nothing ends up in a camera roll.
- Sessions time out automatically, and every sign-in needs a second factor.
- Your administrators can sign a user out everywhere if a phone is lost or someone leaves.
- Designed to run in managed browsers such as Microsoft Edge under Intune.
- Works just as well on the clinic computer, so personal phones are never required.
Questions information governance teams ask.
Talipes Tracker is in development. Where something is planned rather than built, we say so.
Where is the data stored?
In the UK. The app's database is planned on Supabase in its London region, and the website is delivered through Cloudflare. See the list of sub-processors below.
How is data encrypted?
All traffic is encrypted in transit with TLS, and stored data is encrypted at rest by the hosting provider. Names, NHS Numbers and full dates of birth are also encrypted on the clinician's device, with keys held by the hospital.
Can Talipes Tracker staff see our patients?
No. Identifying details are encrypted with your hospital's keys, so we can't read them. If you ask us for support that needs access to your account, it happens only with your permission and is logged.
Are backups taken?
Yes. Automated daily backups with point-in-time recovery, and restores are tested regularly.
What happens if there is a data breach?
We tell your hospital without undue delay after becoming aware of it, so you can meet your 72-hour duty to report to the Information Commissioner's Office, and we support your investigation.
What happens to our data if we stop using Talipes Tracker?
We return your data in standard formats and then delete it, as your hospital instructs, in line with UK GDPR. How long clinical records are kept is set by your hospital.
What if Talipes Tracker stops trading?
You can export your centre's data at any time. If we ever closed, we would give you notice and return all of your data before shutting down.
When can we get support?
Monday to Friday, 9am to 5pm UK time. We respond straight away during those hours.
Can staff sign in with NHSmail or Microsoft accounts?
Single sign-on is planned. Until then, staff sign in with their work email and a second factor.
Is any data used for research?
Only anonymised totals, and only for projects the participating centres have agreed to. Patient-level data never leaves your centre.
Which documents can you provide?
A data processing agreement, a DPIA template, our penetration test summary and our clinical safety summary, each available on request as it is completed.
Sub-processors.
The companies that host or process data on our behalf.
| Supabase | Database, sign-in and file storage for the app. Planned in the UK (London) region. |
|---|---|
| Cloudflare | Hosting and delivery of this website and the app's pages. |
| Email delivery | Sign-in and notification emails. Provider to be confirmed before launch. |
Reporting a security problem.
If you think you've found a security weakness in Talipes Tracker, email security@talipestracker.com. We'll acknowledge it within one working day and keep you updated while we fix it.
Please don't access, change or delete data that isn't yours, and give us reasonable time to fix the problem before telling anyone else.
See it with your own clinic's workflow.
A 20-minute call, walking through a new patient from first score to boots and bar.