C O D E X L A V A
Skip to content
Book a consultation

Healthcare software development in the UK

Healthcare

What Codexlava builds for healthcare

Codexlava builds web applications, internal tools, dashboards and AI features for UK healthcare organisations, with health data treated as special category data under UK GDPR. Codexlava is registered with the ICO and does not yet hold NHS DSPT, DCB0129 or Cyber Essentials, so it suits work that does not require them, or partnering with an organisation that holds them.

Book a free consultation Send us the details
What we build

The work, by service

What is different

Things we plan around

What shapes a healthcare build before any code is written.

  1. Health data is special category data

    Under UK GDPR it needs a lawful basis and an additional condition, and usually a data protection impact assessment. We design for data minimisation, access control and audit logging from the start.

  2. What we hold, and what we do not

    Codexlava is registered with the ICO. It does not hold the NHS Data Security and Protection Toolkit, DCB0129 clinical safety assurance or Cyber Essentials. Products sold into the NHS are usually assessed against DTAC, which covers all three areas.

  3. Some software is a medical device

    Software that diagnoses, treats or informs clinical decisions about an individual can be a medical device, regulated by the MHRA. That is decided by intended purpose, and needs settling before a build starts.

  4. Clinical safety needs a clinician

    DCB0129 requires a Clinical Safety Officer - a registered clinician - and a hazard log. That role sits with you or a partner; we build to the safety case they own.

FAQ

Questions from healthcare

Not answered here? Ask us directly — the first consultation is free.

Ask us directly All FAQs
Does Codexlava hold NHS DSPT or DCB0129?
No. Codexlava is registered with the ICO, and does not currently hold the NHS Data Security and Protection Toolkit, DCB0129 clinical safety assurance or Cyber Essentials. We say so up front so you can decide whether we fit the project.
What healthcare projects is Codexlava suited to?
Work that does not itself require NHS assurances: internal and administrative tools, reporting dashboards, patient information and booking apps for private providers, and prototypes. For products that need DSPT or DCB0129, we can build alongside an organisation that holds them.
Is my healthcare app a medical device?
It might be. Under MHRA guidance, software can be a medical device when its intended purpose is to diagnose, prevent, monitor or treat a condition in an individual. That needs settling with the MHRA guidance, and often a regulatory specialist, before a build starts.
How do you handle patient data?
As special category data under UK GDPR: collected only where needed, stored in hosting you control, in the region you choose, access restricted by role, and changes logged. A data protection impact assessment is usually the first document we ask about.
Can AI be used safely with health data?
With care. Codexlava builds AI steps that suggest rather than decide, with a person approving every output, and uses AI services on business terms under which inputs are not used to train models. Whether a given use is appropriate is a decision for your clinical and data protection leads.

Sources

Often needed alongside this

Tell us what you are building

One call, no obligation. We will tell you what the work involves, roughly what it costs, and whether we are the right people to do it.

Book a consultation Send an enquiry

or call +44 7493 639381 · enquiries@codexlava.co.uk