Built for DCB0129 & DCB0160 - UK NHS clinical safety standards

Clinical safety, made simple.

The fastest path to a defensible safety case. Run your hazard workshop, generate your DCB0129 or DCB0160 documentation, and hand off to deployment - without the spreadsheets.

No credit card required to begin · Email-verified · Live in under 10 minutes

Mandatory 2FA on every login Aligned to NHS DCB0129 & DCB0160 Access from £0/month - live in 10 min Named CSO available as a service
Free 14-day series

Sign up to our 14-day Clinical Safety Series.

A short daily email - 5 minutes a day for 14 days - covering everything a manufacturer or NHS deployer needs to know to navigate DCB0129 and DCB0160 with confidence.

  • Plain-English walkthrough of DCB0129 and DCB0160
  • How to run a hazard workshop that actually finds hazards
  • Templates for intended use, CRMP, ALARP and the safety case
  • No fluff. No hype. Unsubscribe in one click.

We'll only email you the 14-day series and the occasional Trygg.Health update. No spam. Ever.

Thanks - the first lesson is on its way. Check your inbox in a moment.
The problem

Clinical safety is complex, but mandatory.

Some developers treat DCB0129 and DCB0160 as an after-thought. The result for many is endless word-files, lost hazard-log, and reports that age the moment they're signed.

Compliance takes months

Reading the standards, drafting the clinical risk management plan, running workshops, then writing it all up. Six weeks at best, often six months.

Hazards live in spreadsheets

Severity. Likelihood. Pre-control. Post-control. ALARP. All in a tab somewhere on someone's laptop, drifting from the real product.

Manufacturer ↔ deployer handoff is broken

The DCB0129 work doesn't translate into the Trust's DCB0160 safety case. Both sides redo the same analysis with no shared truth.

The platform

One platform from questionnaire to safety case - and from manufacturer to provider.

Trygg.Health turns DCB0129 and DCB0160 into a guided workflow your whole team can run. Scope, hazards, controls, ALARP, CRBA, documents - all in one place, all linked, all auditable.

  • Intended use dictates which questions from our 208-question scoping questionnaire are appropriate, with auto-save and conditional logic.
  • Hazard workshops with AI suggestions, 5×5 risk matrix, and pre/post-control scoring.
  • Auto-generated documents in PDF, Word and Excel - CRMP, hazard log, workshop reports, safety case.
  • Compliance engine tracks 10 mandatory items and gates the safety statement at 100%.
  • Deployment handshake hands a verified safety case from manufacturer (DCB0129) to NHS deployer (DCB0160).
Try it free
Who it's for

Two workflows. One version of the truth.

Trygg.Health understands the full lifecycle - from the manufacturer building software, to the NHS organisation deploying it. We've done it, from both sides!

DCB0129 · Manufacturers

Ship safe software, faster.

For health tech founders, regulatory leads and clinical safety officers building digital health products that need to land in the NHS.

  • Define your product, intended use and clinical risk management plan in one guided flow
  • 208-question scoping with conditional logic - only answer what's relevant to you
  • Hazard library + GPT-4o suggestions seed your workshop, you keep clinical judgement
  • Auto-generated CRMP, Hazard Log and Clinical Safety Case Report in PDF/Word/Excel
  • Track third-party components and their hazards as part of your safety case
  • Versioned releases - each handshake to a deployer is a frozen, auditable artefact
Start as a manufacturer
DCB0160 · NHS Deployers

Make your deployment defensible.

For NHS Trusts, ICBs, and named clinical safety officers responsible for safe deployment of third-party digital health products.

  • Receive a verified DCB0129 handshake from the manufacturer - no chasing emails
  • Map your clinical pathways, system interfaces and IT infrastructure in structured fields
  • Identify and score deployment-specific hazards distinct from the product hazards
  • Run your own workshops with the same hazard library and 5×5 matrix
  • Generate your DCB0160 safety case for sign-off without reformatting Word docs
  • Maintain post-deployment monitoring and re-issue when the product version changes
Start as a deployer
How it works

From sign-up to safety case in five steps.

Each step builds on the last. No retyping. No re-versioning Word documents. No "where's the latest hazard log?" Slack messages.

Scope your product

Pick your workflow - DCB0129 (development) or DCB0160 (deployment) - and add your team.

Run the questionnaire

208 questions with auto-save and conditional logic. AI drafts your intended-use statement.

Workshop hazards

AI suggests hazards from a curated library. Score severity × likelihood on a 5×5 matrix.

Generate documents

CRMP, Hazard Log, Workshop Reports and Clinical Safety Case Report - PDF, Word, Excel.

Hand off to deployment

5-point eligibility check then a versioned handshake from DCB0129 → DCB0160.

What's inside

Everything your safety case needs.

Eleven modules built for the realities of running clinical safety inside a fast-moving health tech team.

Roles & access

Manufacturer, CSO, Deployment CSO and Superuser - each with the right level of access.

Product workflows

Two parallel paths for DCB0129 (dev) and DCB0160 (deployment) with shared lifecycle phases.

Scoping questionnaire

208 questions with auto-save, conditional logic and per-component sub-questions.

Hazard management

Workshop prep, AI suggestions, identification, scoring, controls and residual risk - all in one place.

5×5 risk matrix

Colour-coded clinical risk visualisation - green, amber, red - for severity × likelihood.

CRBA & ALARP

Clinical Risk Benefit Analysis and "As Low As Reasonably Practicable" assessments - only when needed.

Document generation

CRMP, Hazard Log, Workshop Reports and Safety Case as PDF, Word and Excel - versioned.

Compliance engine

10-item checklist gates the safety statement until 100% - no surprises at sign-off.

Deployment handshake

5-point eligibility check, then a versioned, frozen artefact handed to the deployer.

Personnel management

Assign team members to products with roles. UI alerts when no one is set for a workshop.

Deployment scope

Clinical pathways, system interfaces and IT infrastructure - granular CRUD for the real world.

Contact & feedback

Built-in feedback and contact loops so issues never disappear into a support inbox.

Powered by GPT-4o

AI that helps you find the hazards you'd miss.

Trygg.Health uses AI to pattern-match against a curated hazard library, draft your intended-use statement, and flag safety-critical features in your questionnaire answers - so your workshop starts at "review and refine," not "blank page."

Clinical judgement stays with your CSO. AI just stops you missing the obvious.

Try the AI workflow
Hazard suggestions for: Remote vital-signs monitor (paediatric)
HZ-001 · Incorrect SpO₂ reading displayed due to poor sensor contact (severity 4 · likelihood 3)
HZ-002 · Delayed alert delivery in low-bandwidth conditions (severity 4 · likelihood 2)
HZ-003 · Misinterpretation of paediatric vs adult thresholds (severity 5 · likelihood 2)
HZ-004 · Patient ID mismatch on multi-bed ward deployment (severity 5 · likelihood 1)
Document outputs

Every artefact a regulator or NHS Trust will ask for.

Generate the documents directly from your live data. No re-typing. No version drift. Re-export any time the product changes.

PDF

Clinical Risk Management Plan

Your CRMP - the spine of your safety case. Personnel, scope and methodology, exported on demand.

XLSX

Hazard Log

Every hazard, control, residual risk and ALARP statement - straight to Excel for review.

DOCX

Workshop Report

Workshop attendees, decisions, scoring rationale and outputs - ready to circulate.

PDF

Clinical Safety Case Report

The headline DCB0129 / DCB0160 deliverable - current with the latest product version.

PDF

Summary Safety Statement

Executive-friendly summary, gated by a 100% compliance check before it becomes available.

DOCX

CRBA & ALARP records

Conditional outputs - only generated when residual risk requires them.

XLSX

Deployment scope register

Clinical pathways, interfaces and IT infrastructure mapped for DCB0160 deployers.

PDF

Handshake artefact

Versioned, frozen package handed from manufacturer to NHS deployer - auditable end-to-end.

Security & trust

Built for data that has to be right.

Clinical safety data is sensitive. Trygg.Health is built with the assumption that the wrong person should never see, edit or delete it.

Mandatory 2FA

Every login requires a fresh email-verified 6-digit code. No exceptions, no opt-out.

Per-user data isolation

Every database query is scoped to the owning user. Superuser access is logged and limited.

Cascading safe delete

Account deletion cascades cleanly across 31 tables in a single transaction - no orphan data.

Versioned handshakes

Every deployment package is frozen and timestamped - re-issue cleanly when the product evolves.

Pricing

Start free. Scale when you ship.

Plans for solo founders, in-house safety teams, and NHS-adjacent organisations that want a Named Clinical Safety Officer on tap.

Starter

For founders just beginning
£0/ month

Test-drive the questionnaire and hazard workflow on a single product.

  • 1 product
  • Full questionnaire & hazard workshop
  • PDF document export
  • Email support
Start free

CSO-as-a-Service

Named CSO included
Custom

Everything in Team, plus a Named Clinical Safety Officer to sign off your safety case.

  • Named CSO from Trygg.Health
  • Workshop facilitation
  • Safety case sign-off
  • Quarterly review
  • Trust onboarding support
Talk to us
About us

Built by people who've lived this problem.

Trygg Health was founded by clinicians who have built and deployed digital health software inside the NHS. We made the platform we wished we'd had.

Luke Kellaway

Luke Kellaway

Co-founder · Strategy

Driven by a passion for digital innovation and clinical safety, Luke co-founded Trygg Health with Simon. Over 15 years in healthcare and HealthTech, with strategic leadership at C-suite and board level steering Trygg from a strategy perspective.

Luke excels at transforming healthcare ideas into market-ready solutions and scaling them for broad impact, forging partnerships with NHS commissioners, patients, elite sports, and corporate stakeholders.

Simon Smith

Simon Smith

Co-founder · Clinical Safety Lead

Over the past five years, Simon has designed and deployed software for the NHS, meeting clinical safety standards and streamlining care pathways. He balances pragmatic development with complex regulatory demands across the full software lifecycle.

His expertise covers Clinical Safety Officer duties, DCB0129, DCB0160, Software as a Medical Device, and quality/risk management systems (ISO 13485, ISO 14971). Nearly 30 years in clinical practice and 13 years in leadership across radiology, medicines management and surgical pathways.

Questions, answered

FAQ

What is DCB0129 and why does it matter?

DCB0129 is the NHS clinical safety standard for manufacturers of health IT software. If you build digital health software intended to be deployed in the NHS, you need a clinical risk management process - including a Clinical Safety Officer, a hazard log, and a Clinical Safety Case Report - that conforms to it. Trygg.Health implements that process end-to-end.

What is DCB0160 and how is it different?

DCB0160 is the matching standard for the deploying organisation - typically an NHS Trust or ICB. It governs how the deploying CSO assures safe deployment of a third-party product into a specific clinical pathway and IT environment. Our deployment handshake makes the manufacturer-to-deployer transition seamless.

Do I need a Clinical Safety Officer (CSO)?

Yes - both DCB0129 and DCB0160 require a named CSO. If you don't have one in-house, our CSO-as-a-Service tier provides a Named CSO from Trygg.Health to facilitate workshops and sign off your safety case.

How long does a typical safety case take in Trygg.Health?

Most teams move from sign-up to a draft Clinical Safety Case Report in 1-3 weeks, depending on product complexity. The 208-question scope, AI hazard suggestions and auto-generated documents collapse the work that traditionally takes 2-6 months.

Can I migrate an existing safety case in?

Yes. You can paste your intended-use statement, upload your existing hazard log, and use Trygg.Health to keep it living from that point forward. Existing artefacts can be referenced in the document repository.

Where is my data stored?

Data is stored in PostgreSQL (Neon) with per-user isolation enforced at the query layer. Every login requires email-verified 2FA. We do not share your data with any third party except where you explicitly trigger it (e.g. AI hazard suggestions through OpenAI).

Is the AI making clinical decisions?

No. The AI suggests hazards and drafts language. Your Clinical Safety Officer always reviews, scores and signs off. AI is a research assistant, not a decision-maker.

Your safety case, made simple.

Set up your first product in under 10 minutes.