SOC 2 Type II
In ProgressIn Progress — Expected Q1 2026
Independent audit of security, availability, processing integrity, confidentiality, and privacy controls.
Trust Centre
Trust & Security at the Core
Care Assist is built on the enterprise-grade security infrastructure of CX Assist, ensuring your organisation's care communications are protected by robust, globally-recognised standards — including GDPR, HIPAA, SOC 2, and ISO 27001:2022.
GDPR Compliant
HIPAA Compliant
SOC 2 in Progress
ISO 27001:2022 in Progress
Powered by
TRUSTED BY HEALTHCARE LEADERS
Security
Care Assist is powered by CX Assist — a trusted partner in secure care communications. Through this partnership, Care Assist inherits an unwavering commitment to protecting your data and ensuring privacy across all voice and data interactions.
The underlying security posture is underpinned by enterprise-grade AWS infrastructure, industry-leading best practices, and adherence to globally-recognised security and privacy frameworks — across both the UK and USA. CX Assist goes beyond compliance to proactively identify and mitigate risks, continuously enhancing security measures — so Care Assist can focus on delivering compassionate, responsive care experiences without compromise.
This Trust Centre provides a detailed overview of the data security and privacy measures that power Care Assist, including risk management, best practices, and continuous improvement in AI-powered care communications.
Compliance Standards
The safeguarding of your clients' and patients' data is taken seriously. Through CX Assist's compliance programme, Care Assist works to meet a variety of standards to protect sensitive personal and health information — maintaining trust with care providers, families, and the individuals they serve.
ISO 27001
In ProgressIn Progress — Expected Q2 2026
International standard for information security management systems, ensuring a systematic approach to managing sensitive information.
GDPR
CompliantFull compliance with the European General Data Protection Regulation for all personal data processing and storage — covering UK and EU operations.
HIPAA
CompliantHealthcare Insurance Portability and Accountability Act compliance for protected health information in care communications — covering USA operations.
Security Controls
Continuously monitored across 85+ security controls — delivered through CX Assist's platform
Voice & Communication Security
- End-to-end call encryption (AES-256)
- Secure VoIP transmission protocols
- Real-time call monitoring and recording
- Voice data anonymisation capabilities
View 8 more controls
Data Protection
- Regional data storage via AWS RDS (UK & USA regions)
- Automated data backup and recovery
- Data retention policy enforcement
- Client and patient data segregation
View 11 more controls
AI & Machine Learning Security
- AI model access controls
- Training data protection
- Bias detection and mitigation
- Model versioning and rollback
View 4 more controls
Infrastructure Security
- AWS multi-region deployment
- Network segmentation and firewalls
- DDoS protection via CloudFront
- Intrusion detection systems
View 14 more controls
Access Management
- Multi-factor authentication (AWS Cognito)
- Role-based access controls
- Regular access reviews
- Privileged account monitoring
View 6 more controls
Compliance & Governance
- Regular security assessments
- Incident response procedures
- Vendor risk management
- Employee security training
View 18 more controls
Infrastructure & Technology
Robust & Scalable Infrastructure — Powered by CX Assist
AWS Foundation
Care Assist runs on Amazon Web Services infrastructure managed by CX Assist, with enterprise-grade security across both UK and USA deployments:
- AWS RDS for secure, regionally-compliant database storage
- AWS Cognito for identity and access management
- CloudFront CDN for secure, fast content delivery
- GuardDuty for intelligent threat detection
- Route 53 with built-in DDoS protection
Telecommunications Security
Industry-hardened voice infrastructure designed for secure care communications.
- Custom Asterisk framework with security hardening
- Encrypted SIP communications
- Secure call routing and load balancing
- Real-time call quality monitoring
AI Security
Responsible AI deployment with robust safeguards and governance throughout every layer.
- Secure AI model deployment and management
- Data anonymisation for AI training
- Continuous model monitoring and validation
- Ethical AI governance framework
Resources
12 Policies
Policies
- Information Security Policy
- Data Protection and Privacy Policy
- Incident Response Policy
- AI Ethics and Governance Policy
- + 8 more policies
8 Certifications
Certifications
- AWS Security Best Practices
- Telecommunications Security Standards
- AI Safety Guidelines
- Healthcare & Care Data Protection
- + 4 more certifications
4 Technical Documents
Technical Documents
- Security Architecture Overview
- Data Flow and Processing Guide
- Encryption Standards Documentation
- Business Continuity Plan
Trusted By
130+ organisations across home care, residential care, healthcare, wellness, and support services — in the UK and USA — trust Care Assist (powered by CX Assist) with their most sensitive client and patient communications.
“They cost me a fraction of what it would cost to pay a full-time receptionist... Just doesn't make any financial sense not to use them.”
James Shorthouse
Elms Chiropractic
“Kate has restored my faith in VA companies and continues to over-deliver at every opportunity! The feedback from patients is very positive too!”
Healthcare Practice Owner
Care Provider
FAQ
Ready to Secure Your Care Communications?
Join 130+ Care Organisations Trusting Care Assist
Experience enterprise-grade security — powered by CX Assist — with AI-driven voice solutions built specifically for the care sector. Book a free consultation to see how Care Assist can protect your client and patient interactions across the UK and USA.
All consultations are confidential and covered by our strict privacy policies.
