Import code - user guide
Find out how to import code into the NHS England Secure Data Environment.
To import code into the Secure Data Environment (SDE), you must submit a request through the external SDE portal.
Your file must pass all security checks before you can download it within the SDE.
This guide provides information on:
- what you need to know before you submit a request
- how to submit your request
- how we check your file(s)
- how to access the code in the SDE
Before you submit a request
You can upload one file with your request. The file must be no larger than 1MB.
You can upload these file types:
- JSON
- Markdown
- Python
- R
- SQL
- ZIP
For ZIP files, we have several supplementary rules. Namely:
- a ZIP file can contain a maximum of 5 files
- each file in the ZIP file must be a JSON, Markdown, Python, R or SQL file
- do not include another ZIP file inside the ZIP file
- files in the ZIP file must not contain unsafe file paths that would extract them outside the intended destination folder
- each file in the ZIP file must have a decompressed size of 1 MB or less
How to submit your request
- Sign in to the SDE Portal and select 'Import reference data or code'.
- Select 'Import code'.
- Upload your file.
- Provide the required additional information.
- Read the import conditions and confirm that you understand and accept them.
- Check your request, then submit it for review.
The SDE will automatically check your file after you submit your request.
How we check your file
Your file goes through the following checks. We only proceed to the next level where the check step was successful.
- On upload, we check the uploaded file type and size against our rules.
- We run malware checks looking for viruses and other harmful software.
- ZIP files go through a file validation process. The files within the ZIP are extracted and checked for size, type and unsafe file paths.
- We run checks looking for personal or sensitive information
- Final check is to run static application security testing (SAST). This examines your code for potential security weaknesses without running it.
Your file must pass every check before we can approve your request.
If your request is approved
We will notify you when your file is approved and ready to download.
To access your file:
- Log in to the virtual desktop infrastructure (VDI).
- Open the Output and import tool – following sign in and two-factor authentication (2FA) steps.
- Select Import requests.
- Locate your approved request in the list of import requests listed and click View details.
- Click on the file name presented to download the file.
- To retrieve and work with your code, close the open tab and open the Home folder icon on your VDI desktop. Your downloaded file will appear under Downloads in the File Explorer window.
If your request is rejected
We will notify you and explain why your request was rejected. We will also advise you on what to do next.
Contact us
For general questions or concerns regarding importing code, contact the SDE service on [email protected].
For technical issues, such as account access, contact the National Service Desk on [email protected] or by phoning 0300 303 5035.
Drop-in sessions
SDE users are invited to attend drop-in session run by our data specialist team. These open meetings are for questions relating to the SDE environment and its tools, including data sets and importing data and code.
Drop-in sessions occur every Monday, Wednesday and Friday from 10am to 11am GMT (excluding public holidays) via Microsoft Teams. Invites are sent with your SDE account activation email. Alternatively, contact [email protected] for more information.
Last edited: 12 October 2026 3:38 pm