CareHomeDeskCareHomeDeskTrust and security
Written to be forwarded. If something here is not enough for your information governance process, say so and we will answer properly rather than send you a brochure.
The basics
Who operates it
CareHomeDesk Ltd, company number 17376664, registered in England and Wales. Built and run by a specialist care sector contractor rather than a general software vendor.
Where the data sits
Application data and authentication run on Supabase, hosted in the EU (Frankfurt). The site and application run on Vercel. Payments are processed by Stripe.
Card details
Never reach our servers. Stripe handles payment end to end and we store only a customer reference.
Resident data
We do not ask for it and the product does not need it. CareHomeDesk is about buildings, not the people living in them.
If you do enter it
You remain the data controller and we act as processor under a Data Processing Agreement. Ask and we will provide one.
Your legal position
UK GDPR. You can request access, correction or deletion at any time, and complain to the ICO.
What the AI does, and does not
What it does
Drafts scopes of work, answers questions about UK care property regulation, and identifies things you photograph. It names the standard it is working from.
What it does not do
Make decisions, sign anything off, or replace a competent person. Every output carries an indicative only statement for that reason.
Your inputs
Sent to the model to produce your answer. Not used to train it, and not shared with other customers.
Accuracy
It can be wrong, and it will occasionally be confidently wrong. Anything carrying a legal duty should be confirmed with a competent person before you act.
What we are not claiming
CareHomeDesk is early. It does not hold ISO 27001 or Cyber Essentials, there is no formal uptime commitment, and no penetration test has been published. Saying otherwise would be easy and would not survive your first serious review.
What we can tell you is exactly where your data sits, who touches it, and what happens if you ask us to delete it. If your process needs more than that today, tell us what and we will say plainly whether we can meet it.
Support
Who answers
The founder. There is no support tier and no ticket queue to get lost in.
How fast
Two working days during beta. If something is broken and stopping you working, say so and it goes to the front.
How to reach us
support@carehomedesk.co.uk, or the contact form.
Need a Data Processing Agreement, a completed security questionnaire, or an answer to something not covered here? Ask and you will get a straight answer from the person who built it.