IT & Security Standards
PRISM is Cyber Essentials Plus certified and fully compliant with UK Data Protection legislation. In this framework, the care provider acts as the Data Controller, while Care Protect serves as the Data Processor.
For enhanced security, PRISM uses hard-wired cameras rather than Wi-Fi, and all data is protected with double-end banking-grade encryption. Footage is stored off-site using AWS cloud infrastructure, which is ISO 27001 accredited. A secure file-sharing system is used for footage delivery.
Recordings are motion-triggered only, and no cameras are installed in en suite or bathroom areas. Data is routinely stored for 30 days before automatic deletion, while submitted incident data is retained for a period of up to one year to support any ongoing regulatory investigations or legal processes.
PRISM also supports the migration of pre-existing CCTV systems.