For the NHS
Digital health support for ICBs, trusts and primary care
Independent advice on whether a digital product is safe, lawful and fit to adopt, and the design and build of patient- and family-facing apps that hold up to DTAC, clinical safety and data protection scrutiny.
Where we help NHS teams
NHS engagements usually start with a question about a product: should we build it, buy it, or trust the one we have been offered?
Medical device and DTAC triage
A fixed-scope review of whether a product has a medical purpose under MHRA guidance, how it measures up against DTAC, and a prioritised list of gaps, written for a digital or clinical safety board.
Independent supplier review
Before you adopt or renew a digital product: an independent check of the supplier’s evidence, data protection, accessibility and technical quality, with risk ratings you can act on.
Patient and family apps
Apps that help people prepare for appointments and act while they wait, kept non-diagnostic by design. Our own product, Striova, does this for families of neurodivergent children.
Clinical safety and DPIA evidence
DCB0129 hazard logs and safety case evidence, DPIAs and DTAC submissions prepared alongside the build, with a clinical safety officer appointed for each engagement where the standard applies.
What you can expect from us
- Plain-English written findings that a digital board, clinical safety officer or IG lead can use directly.
- Non-diagnostic, information-first design unless a medical device route is deliberately chosen and resourced.
- DCB0129 evidence produced as we build, so your DCB0160 work has something solid to rely on.
- UK-hosted, with data protection by design, a DPIA, and your organisation in control of patient data.
- Accessible to WCAG 2.2 AA, and built to the NHS service standard.
- Honest about our own position: our DSPT assessment is in progress, and our trust page lists what we do not hold yet.
Supplier facts
- Legal name
- QuoVira Health Ltd
- Company number
- 17322340
- VAT number
- GB525574969
- ICO registration
- ZC190656
- Cyber Essentials
- Certified 22 September 2026
- Organisation size
- Micro SME
- Data hosting
- United Kingdom
- Registered office
- 128 City Road, London EC1V 2NX
Cyber Essentials certificate 6f372ac7-9d96-46ef-874f-c25dcbb4c48a. Our full assurance position, including what we do not hold yet, is on our trust page.
How to buy from us
Routes that work today
We keep engagements proportionate, so most NHS work can start small and quickly.
A small, fixed-price review
A medical device and DTAC triage or an independent supplier review, scoped and priced in writing and sized to be bought quickly under your standing financial instructions for lower-value work.
A competitive procurement
For larger builds we respond to opportunities published on Find a Tender, and take part in market engagement where it helps you shape the requirement.
Through your delivery partner
If you buy digital work through a framework partner, we can join their team as a specialist health and care subcontractor.
Alongside your own team
A fractional product owner or intelligent client to manage an existing supplier on your behalf, so you have someone senior on your side of the table.
Common questions
How do we know whether an app is a medical device?
It turns on the product’s intended purpose, set by its manufacturer and shown in its claims, and on what the software actually does for an individual. Information, signposting and self-help tools are generally not medical devices; software that diagnoses, predicts or recommends treatment for a person can be. Our triage sets out the reasoning against current MHRA guidance so your board can rely on it.
Will you complete DTAC for us?
DTAC is completed by the developer of a product and assessed by the NHS organisation that adopts it. If we build the product, we prepare the DTAC evidence with you. If you are assessing someone else’s product, we can review their submission independently.
Do you have a clinical safety officer?
Where DCB0129 applies, a suitably qualified and registered clinician is appointed as clinical safety officer for that engagement. We do not keep one on staff, and we say so rather than imply otherwise.
Have you completed the Data Security and Protection Toolkit?
We are registered on the Toolkit and our assessment is being completed. It has not yet been published. Our trust page always shows the current status.
More detail in our insights and on our services page.
Got a health or care service to get right?
Whether it's a question about regulation, a service to design, or a supplier to check, tell us the problem and we'll tell you how we'd approach it. The first conversation is free.