DCB0129 & DCB0160 · UK NHS clinical safety

Appraise it.
Approve it.
Deploy it.

Options appraisal, business case and both NHS clinical safety standards in one continuous record. For the teams who build digital health software, and the organisations that deploy it.

No credit card required to begin · Email-verified · Live in under 10 minutes

What the platform covers

Frame the problem, then compare every option - including doing nothing.

Write the criteria before you see the options, score the candidates against the same ones, and model the do-nothing baseline properly so the cost of inaction is on the record rather than assumed. Options you reject keep their reasoning, which is exactly what a commissioner or an auditor asks for eighteen months later.

For provider organisations choosing what to adoptFor software teams who need the case their buyer has to make
Mandatory 2FA on every login Aligned to NHS DCB0129 & DCB0160 Free to start - live in 10 minutes Named CSO available as a service
The problem

The expensive decisions get made before compliance starts.

Most organisations appraise digital options in a spreadsheet somebody built once and a business case template somebody else wrote, then open a hazard log weeks later. By that point the choice has already been made, somewhere nobody can trace.

Compliance starts too late

Nobody can reconstruct why this product was chosen over the two that were rejected, or what those rejected options would have cost.

The consequences are unplanned

A product that clears the front door faster moves the queue further down the pathway, unless somebody modelled that before go-live. Hazards, meanwhile, sit in a spreadsheet drifting from the real product.

The audit trail is broken

The safety case cites an intended use that lives in a business case the platform has never seen, and the DCB0129 work never translates into the deployer's DCB0160 case. Two versions of the truth, one of them stale.

The three stages

Three stages, one continuous record.

Each stage inherits everything the stage before it decided. Nothing is re-typed, and nothing is asserted twice.

Appraise

Frame the operational or clinical problem, compare the candidate solutions including doing nothing, model the workforce and financial position once the change has stabilised, and produce a business case an executive team can act on - structured on the HM Treasury Five Case Model.

Approve

Turn the chosen solution into a defensible clinical safety case under DCB0129 and DCB0160, with a 208-question guided scope, AI-seeded hazard workshops, 5×5 risk scoring, controls, CRBA and ALARP - and a named Clinical Safety Officer signing every judgement.

Deploy

Freeze the evidence, hand it across on a gated and versioned handshake, map the clinical pathway and interfaces it lands in, and keep the safety case live so a new release or a changed pathway re-opens the assessment rather than escaping it.

Stage 01 · Appraise

Business cases on the framework your Trust already uses.

The Business Case Builder is grounded in the HM Treasury Five Case Model - the same framework NHS Trusts and ICBs use to assess spending proposals - but restructured into six plain-language stages that lead you through it step by step.

01

Scoping

A short guided question decides whether you need a lightweight Quick Case or the fuller Full Case treatment, so you are never doing more paperwork than the decision warrants.

02

Strategy

Why this matters, and why now. The strategic case for change, framed from the operational or clinical problem rather than the product a supplier is selling.

03

Options and Value

Comparing realistic alternatives, including doing nothing, with a built-in sense-check on the numbers.

04

Commercial Approach

How you will actually buy and contract for it, documented alongside the case rather than worked out afterwards.

05

Affordability

A ready-built cost table covering the whole life of the investment, not just the sticker price.

06

Making It Happen

Who is delivering it, and how you will know it worked.

Rigorous without requiring you to be an expert

Every field carries a prompt that translates Five Case Model terminology - critical success factors, optimism bias, sensitivity analysis - into a plain question anyone can answer.

For larger Full Case proposals, two built-in checkpoints pause the process for sign-off before commercial and financial detail gets built out. The result is a business case as rigorous as anything HM Treasury guidance asks for, without requiring you to already know what HM Treasury guidance asks for.

The platform

One platform from the problem you identified to the product you deployed.

Trygg.Health turns options appraisal, business case development and the two NHS clinical safety standards into a single guided workflow your whole team can run. Problem, options, benefits, hazards, controls, ALARP, CRBA, documents - all in one place, all linked, all auditable.

  • ✓Options appraisal and business case built in the same record that later carries the safety case, so the intended use and the benefits claimed are stated once.
  • ✓Intended use dictates which questions from our 208-question scoping questionnaire are appropriate, with auto-save and conditional logic.
  • ✓Hazard workshops with AI suggestions, 5×5 risk matrix, and pre/post-control scoring.
  • ✓Auto-generated documents in PDF, Word and Excel - CRMP, hazard log, workshop reports, safety case.
  • ✓Compliance engine tracks 10 mandatory items and gates the safety statement at 100%.
  • ✓Deployment handshake hands a verified safety case from manufacturer (DCB0129) to NHS deployer (DCB0160).
Try it free
Who it's for

Two workflows. One version of the truth.

Trygg.Health understands the full lifecycle - from the manufacturer building software, to the organisation appraising it and putting it into a live clinical pathway. We have done it, from both sides.

DCB0129 · Manufacturers

Ship safe software, faster.

For health tech founders, regulatory leads and clinical safety officers building digital health products that need to land in the NHS.

  • Define your product, intended use and clinical risk management plan in one guided flow
  • 208-question scoping with conditional logic - only answer what's relevant to you
  • Hazard library + AI suggestions seed your workshop, you keep clinical judgement
  • Auto-generated CRMP, Hazard Log and Clinical Safety Case Report in PDF/Word/Excel
  • Track third-party components and their hazards as part of your safety case
  • Versioned releases - each handshake to a deployer is a frozen, auditable artefact
Start as a manufacturer
Appraise + DCB0160 · Provider organisations

Decide well, then deploy defensibly.

For NHS Trusts, ICBs and independent providers appraising digital options and responsible for deploying third-party products into a live clinical pathway.

  • Appraise the options against the problem you identified, including the option of doing nothing
  • Model the workforce and financial position after the change has stabilised, not on day one
  • Produce a business case generated from the appraisal rather than written up separately
  • Receive a verified DCB0129 handshake from the manufacturer - no chasing emails
  • Map your clinical pathways, system interfaces and IT infrastructure in structured fields
  • Identify and score deployment-specific hazards distinct from the product hazards
  • Run your own workshops with the same hazard library and 5×5 matrix
  • Generate your DCB0160 safety case for sign-off without reformatting Word docs
  • Maintain post-deployment monitoring and re-issue when the product version changes
Book a demo
How it works

From the problem to the deployed product in five steps.

Each step builds on the last. No retyping, no re-versioning Word documents, and no "where's the latest hazard log?" messages.

Frame the problem

Start from the operational or clinical problem, not from the product a supplier is selling.

Appraise the options

Compare the candidates, including doing nothing, and model the workforce and financial impact.

Produce the business case

A structured case generated from the appraisal, ready for an executive team to act on.

Scope and workshop

208 questions with conditional logic, then a hazard workshop with AI suggestions and 5×5 scoring.

Approve and hand off

Generate the documents, gate the safety statement at 100%, then a versioned handshake into deployment.

What's inside

Everything your safety case needs.

Eleven modules built for the realities of running clinical safety inside a fast-moving health tech team.

Roles & access

Manufacturer, CSO, Deployment CSO and Superuser - each with the right level of access.

Product workflows

Two parallel paths for DCB0129 (dev) and DCB0160 (deployment) with shared lifecycle phases.

Scoping questionnaire

208 questions with auto-save, conditional logic and per-component sub-questions.

Hazard management

Workshop prep, AI suggestions, identification, scoring, controls and residual risk - all in one place.

5×5 risk matrix

Colour-coded clinical risk visualisation - green, amber, red - for severity × likelihood.

CRBA & ALARP

Clinical Risk Benefit Analysis and "As Low As Reasonably Practicable" assessments - only when needed.

Document generation

CRMP, Hazard Log, Workshop Reports and Safety Case as PDF, Word and Excel - versioned.

Compliance engine

10-item checklist gates the safety statement until 100% - no surprises at sign-off.

Deployment handshake

5-point eligibility check, then a versioned, frozen artefact handed to the deployer.

Personnel management

Assign team members to products with roles. UI alerts when no one is set for a workshop.

Deployment scope

Clinical pathways, system interfaces and IT infrastructure - granular CRUD for the real world.

Contact & feedback

Built-in feedback and contact loops so issues never disappear into a support inbox.

AI-assisted, clinician-judged

AI that helps you find the hazards you'd miss.

Trygg.Health uses AI to pattern-match against a curated hazard library, draft your intended-use statement, and flag safety-critical features in your questionnaire answers - so your workshop starts at "review and refine," not "blank page."

Clinical judgement stays with your CSO. AI just stops you missing the obvious.

Try the AI workflow
Hazard suggestions for: Remote vital-signs monitor (paediatric)
HZ-001 · Incorrect SpO₂ reading displayed due to poor sensor contact (severity 4 · likelihood 3)
HZ-002 · Delayed alert delivery in low-bandwidth conditions (severity 4 · likelihood 2)
HZ-003 · Misinterpretation of paediatric vs adult thresholds (severity 5 · likelihood 2)
HZ-004 · Patient ID mismatch on multi-bed ward deployment (severity 5 · likelihood 1)
Document outputs

Every artefact a regulator or NHS Trust will ask for.

Generate the documents directly from your live data. No re-typing. No version drift. Re-export any time the product changes.

PDF

Clinical Risk Management Plan

Your CRMP - the spine of your safety case. Personnel, scope and methodology, exported on demand.

XLSX

Hazard Log

Every hazard, control, residual risk and ALARP statement - straight to Excel for review.

DOCX

Workshop Report

Workshop attendees, decisions, scoring rationale and outputs - ready to circulate.

PDF

Clinical Safety Case Report

The headline DCB0129 / DCB0160 deliverable - current with the latest product version.

PDF

Summary Safety Statement

Executive-friendly summary, gated by a 100% compliance check before it becomes available.

DOCX

CRBA & ALARP records

Conditional outputs - only generated when residual risk requires them.

XLSX

Deployment scope register

Clinical pathways, interfaces and IT infrastructure mapped for DCB0160 deployers.

PDF

Handshake artefact

Versioned, frozen package handed from manufacturer to NHS deployer - auditable end-to-end.

Security & trust

Built for an organisation that already gets inspected.

Clinical safety data is sensitive, and a clinical safety system has to survive the same scrutiny its owner does. Trygg.Health is built on the assumption that the wrong person should never see, edit or delete it.

Mandatory two-factor authentication

A six-digit emailed code on every login, expiring in ten minutes. Not optional, not per-user configurable.

Role-based access control

Manufacturer, Clinical Safety Officer, Deployment CSO and superuser roles, each scoped to what that person needs.

Private by design

Your products, hazards and safety cases are visible only to the people you choose. Other organisations on the platform can never access them.

Immutable, versioned artefacts

Handshake packages are frozen and timestamped; superseded documents remain retrievable.

Clinician sign-off on every judgement

AI seeds hazard suggestions and drafts intended-use language; a registered Clinical Safety Officer decides.

You own your safety file

Export your complete hazard log, safety case and version history at any time. If you ever move on, your evidence goes with you, and anything left behind is fully removed.

The alternatives

Where the other options stop.

The choice is usually between stitching several systems together, buying a compliance-only platform, or running the whole thread in one place.

  Several systems
stitched together
A compliance-only
platform
Trygg.Health
Problem framing and options appraisal Partial No Yes
Business case with workforce and financial impact Partial No Yes
DCB0129 manufacturer workflow Partial Yes Yes
DCB0160 deployer workflow Partial Yes Yes
Gated manufacturer-to-deployer handshake No Partial Yes
Single audit trail from problem to deployment No No Yes
Documents in your branding Partial Partial Yes
One supplier, one contract, one training burden No Yes Yes

Assessment of the alternatives is based on the capability categories they publish. We are happy to be measured against it line by line.

Pricing

Start free. Scale when you're ready.

Starter and Assure are for people working on their own. Access is for teams working together on the same products, from appraisal through to deployment.

Starter

For founders and individuals taking their first product through clinical safety
£0/ month

Free for as long as you need it

Solo One user, up to two products

Run complete DCB0129 and DCB0160 workflows on up to two products.

  • Up to 2 development or deployment products in total
  • Structured scope questionnaire
  • Hazard identification and risk-control workshops
  • AI-assisted hazard suggestions
  • Word safety reports and Excel hazard logs
  • Gated, versioned development-to-deployment handoff
  • Word and Excel exports carry a Trygg.Health Starter mark
  • Preview of Workspace and Solution Discovery
Start free

Assure

For independent CSOs and solo practitioners managing several products
£89 / month

or £960 a year, saving 10%

Solo One named user, unlimited products

Everything in Starter, with unlimited products and clean exports.

Everything in Starter, plus

  • Unlimited development and deployment products
  • Clean Word reports and Excel hazard logs, with no plan marking
  • One named user, not shared between people
  • Preview of Workspace and Solution Discovery

Start on Starter and upgrade to Assure from inside the app whenever you need it. Working with colleagues on the same product? Access keeps everyone in one organisation account.

Start on Starter

CSO-as-a-Service

Named CSO included
Priced separately

Available on any plan. Not required to start.

A Trygg.Health Clinical Safety Officer working alongside your team.

  • A named Clinical Safety Officer from Trygg.Health
  • Held by a registered healthcare professional
  • Workshop facilitation
  • Safety case sign-off
  • Additional seats beyond your plan allowance
Talk to us

All figures exclusive of VAT · Payment terms 30 days from invoice · Additional seats and a Trygg-supplied named Clinical Safety Officer are priced separately, and neither is required to start. Features are available subject to user role and workflow approvals.

Getting started

Live inside four weeks.

No infrastructure to run, patch or information-govern. We configure the workspace, walk your team through a real appraisal, and leave them running it without us in the room.

Week 1

Workspace and branding

You name an Enterprise owner who controls access - seats, 2FA invites, starters, movers and leavers. We configure tenancy, logo and colour.

Week 2

Walkthrough and first appraisal

A working session on a real problem you are currently weighing up, taken through the appraisal stage end to end.

Week 3

First safety case

A live product taken through scoping and a facilitated hazard workshop, producing a hazard log and a draft safety case.

Week 4

Handover and sign-off

Documents reviewed, the named Clinical Safety Officer confirmed, and the team left running it themselves.

Next steps

  1. Confirm the Enterprise owner and the six seat holders
  2. Pick one live problem to run through the appraisal stage
  3. Agree monthly or annual terms and a start date
About us

Built by people who've lived this problem.

Trygg Health was founded by clinicians who have built and deployed digital health software inside the NHS. We made the platform we wished we'd had.

Luke Kellaway

Luke Kellaway

Co-founder · Strategy

Driven by a passion for digital innovation and clinical safety, Luke co-founded Trygg Health with Simon. Over 15 years in healthcare and HealthTech, with strategic leadership at C-suite and board level steering Trygg from a strategy perspective.

Luke excels at transforming healthcare ideas into market-ready solutions and scaling them for broad impact, forging partnerships with NHS commissioners, patients, elite sports, and corporate stakeholders.

Simon Smith

Simon Smith

Co-founder · Clinical Safety Lead

Over the past five years, Simon has designed and deployed software for the NHS, meeting clinical safety standards and streamlining care pathways. He balances pragmatic development with complex regulatory demands across the full software lifecycle.

His expertise covers Clinical Safety Officer duties, DCB0129, DCB0160, Software as a Medical Device, and quality/risk management systems (ISO 13485, ISO 14971). Nearly 30 years in clinical practice and 13 years in leadership across radiology, medicines management and surgical pathways.

Questions, answered

FAQ

Does Trygg.Health help before the compliance work starts?

Yes, and that is the part most tools skip. Before any hazard log is opened you can frame the problem you are actually solving, appraise the candidate solutions against it including the option of doing nothing, model the workforce and financial position once the change has stabilised, and generate a business case from that appraisal. Because it lives in the same record that later carries the safety case, the intended use and the benefits claimed are stated once rather than asserted twice in two documents that drift apart.

Why does the appraisal stage matter commercially?

A product that clears the front door faster often just moves the queue further down the pathway, and infrastructure cost that falls out of one budget has to be reinvested somewhere. If those consequences are modelled before go-live, finance and operations are given a decision rather than a request to fund an experiment, which is usually the difference between a business case that moves and one that stalls for a quarter.

What is DCB0129 and why does it matter?

DCB0129 is the NHS clinical safety standard for manufacturers of health IT software. If you build digital health software intended to be deployed in the NHS, you need a clinical risk management process - including a Clinical Safety Officer, a hazard log, and a Clinical Safety Case Report - that conforms to it. Trygg.Health implements that process end-to-end.

What is DCB0160 and how is it different?

DCB0160 is the matching standard for the deploying organisation - typically an NHS Trust or ICB. It governs how the deploying CSO assures safe deployment of a third-party product into a specific clinical pathway and IT environment. Our deployment handshake makes the manufacturer-to-deployer transition seamless.

Do I need a Clinical Safety Officer (CSO)?

Yes - both DCB0129 and DCB0160 require a named CSO, and they must be a registered healthcare professional. If you don't have one in-house, our CSO-as-a-Service tier provides a Named CSO from Trygg.Health to facilitate workshops and sign off your safety case.

How long does a typical safety case take in Trygg.Health?

Most teams move from sign-up to a draft Clinical Safety Case Report in 1-3 weeks, depending on product complexity. The 208-question scope, AI hazard suggestions and auto-generated documents collapse the work that traditionally takes 2-6 months.

Can I migrate an existing safety case in?

Yes. You can paste your intended-use statement, upload your existing hazard log, and use Trygg.Health to keep it living from that point forward. Existing artefacts can be referenced in the document repository.

Where is my data stored?

We store all data in the EU, a region the UK recognises as having equivalent data protection standards, so your data is protected to the same level as if it were held in the UK. Isolation is enforced at the query layer rather than in the interface, every login requires email-verified 2FA, and we do not share your data with any third party except where you explicitly trigger it - for example, AI hazard suggestions.

Is the AI making clinical decisions?

No. The AI suggests hazards and drafts language. Your Clinical Safety Officer always reviews, scores and signs off. AI proposes, the clinical team reviews, the CSO decides, and your organisation signs off.

Does using Trygg.Health make my organisation compliant?

No, and any supplier telling you otherwise is worth a second look. The platform structures the work, seeds hazard suggestions, scores and versions every record, generates the documents, and stops a safety statement being issued before the mandatory items are complete. Clinical judgement, the named Clinical Safety Officer's sign-off, the decision on whether residual risk is acceptable, and organisational accountability for what gets deployed all remain with you.

Appraise it. Approve it. Deploy it.

Start free on a single product, or talk to us about Access for your organisation.