Skip to main content

IM1 prerequisites

Section 1: Your details
Full name
Name of the IM1 product you are wanting to onboard with
Section 2: Clinical safety prerequisites
Confirm the following prerequisites are already in place:

A qualified Clinical Safety Officer is in place *
A detailed use case description that covers the entirety of the product *
A written clinical safety process and a commitment to uplift this as required with the development of the IM1 product *
Ability to populate a detailed hazard log template and a commitment to uplift this as required with the development of the IM1 product *
Confirm that if the product contains software as a medical device you understand that this would be subject to additional scrutiny *
Section 3: Information governance prerequisites
Confirm you are committed to the following:

Starting the process of obtaining a Data Security and Protection Toolkit (DSPT) annual assessment, to be in place by time of go live *
Completing a Data Protection Impact Assessment including Transparency/Privacy Notice for the consuming supplier and for associated applications and services as required for relevant use cases *
Utilising an Information Security Management System (ISO 27001 recommended) *
Completing a penetration test (pen test) which must be completed by a 3rd party CHECK / CREST accredited organisation, prior to go live and annually thereafter. The CHECK / CREST accredited organisation must be accredited to conduct penetration testing *
A UK location for processing patient data *
Section 4: Provider suppliers
Confirm which provider supplier(s) you would like to integrate with (you may select more than one):

EMIS (EMIS Web)
TPP (SystmOne)
Medicus
Section 5: Use case and benefits
2000 character limit. Please state the clinical use case and summarise the release scope for the product, including the benefits to the NHS and patient clinical care.
Interface options

EMIS
TPP
Other GP new market entrants as when available
If using PFS, would you be utilising NHS Login as an authentication method for PFS?
Does your use case use artificial intelligence (AI)? *
2000 character limit
Are the following documents to support your application to IM1 in a draft state?

Data Protection impact assessment (DPIA) *
Clinical safety case *
Hazard log *
Medical device status of certification (if applicable)
2000 character limit