Where it stands
Each item an IG or procurement team usually asks about, as of 27 October 2026.
| Item | Where it stands |
|---|---|
| Data protection impact assessment | Drafted, ready to review |
| Data processing agreement | Outline drafted, ready to review |
| Sub-processor list | Drafted, ready to review |
| DTAC answers | Drafted, ready to review |
| Cyber Essentials | Preparation drafted; not applied for yet |
| Data Security and Protection Toolkit | Plan drafted; not submitted yet |
| Clinical safety (DCB0129) | Scoping drafted; whether it applies needs a lawyer and a clinical safety officer |
| Accessibility | Built towards WCAG 2.2 AA; not audited yet |
| Review of Tom's plan by a PBS practitioner | Not booked yet. No practitioner has reviewed it yet, and no learner uses it until they have. |
| Co-production panel | Not booked yet. No practitioner has reviewed it yet, and no learner uses it until they have. |
| Company that holds your contract | Sunset Matches Inc., a US company registered in Delaware, trading as Humble Guest. A UK company will be formed after a few meetings. |
| Results in England | None yet. A pilot is where we find out. |
No NHS body, regulator or sector organisation has reviewed Humble Guest or backs it. If that changes, we'll say who.
To see any draft, email hello@humbleguest.com.
Back to the page for commissioners