Questions, answered

Most practices can be technically set up very quickly. For clinical governance, we estimate that reviewing the full symptom library (currently 217 symptoms) and harmonising it with how your practice works will take two clinicians approximately one session each.

We recommend doing this side by side, so queries and local decisions can be discussed and agreed as you go. This approach tends to be faster, more consistent, and reduces the need for later rework.

Once this review is complete, the toolkit is ready for day-to-day use by the wider team.

No. The toolkit is web-based and works in a standard browser. There’s no local software to install for day-to-day use.

Yes. You can tailor wording, appointment types, local pathways, and which symptoms are enabled—so the guidance reflects your practice model.

Each practice is responsible for its final, live wording. The toolkit supports a clinical review workflow so content can be signed off locally and reviewed periodically.

Symptoms can be marked as pending review until a clinician (or authorised reviewer) approves them. This provides a clear audit trail of sign-off and supports re-review cycles.

No. The toolkit is designed for guidance and routing. It does not store patient-identifiable information.

A formal DPIA is unlikely to be required for your practice in relation to the Signposting Toolkit. The platform does not process any patient-identifiable data — it is used entirely by reception and care navigation staff to guide their decision-making. The only personal data processed is staff data (names, login credentials, and usage activity), which is standard for any web-based workforce tool.

Under UK GDPR Article 35, a DPIA is required where processing is likely to result in high risk to individuals. As no patient data is involved, that threshold is not met here.

As good practice, we recommend reviewing our Data Processing Agreement and recording your assessment within your practice’s ROPA. Your DPO or Caldicott Guardian may wish to confirm this.

No — the Signposting Toolkit is not currently classified as a medical device and does not require MHRA certification.

It is designed as a care navigation and operational support tool for practice staff. It:

• provides structured, practice-approved guidance
• supports consistent patient routing (for example GP, Pharmacy First, nurse, or admin pathways)
• does not diagnose, risk stratify, or recommend treatment
• does not process or store patient data

All content is governed through local clinical review and sign-off within the practice.

We keep this position under review as the platform evolves.

Each practice’s toolkit is completely separate and private.

• Other practices cannot see or access your content
• Your symptom edits, workflows, and handbook content remain your own

The Signposting Toolkit does not store patient-identifiable data.

Access from our side is:

• restricted to authorised developers only
• not routine
• used only for support, maintenance, or requested changes
• auditable and controlled

We follow a least-privilege access approach, meaning we only access a practice environment when necessary to support the system.

Optional tools are available to help administrators improve clarity of instructions or generate suggested questions. These features can be switched off.

No. Any AI-generated content is treated as draft and must be reviewed and approved locally before it can be used live.

Yes. AI features are controlled with feature flags and can be disabled at practice level.

We provide onboarding support and practical help to get your practice set up, plus ongoing support for questions and updates.

The toolkit includes a suggestions mechanism for continuous improvement, and you can also contact us directly.