Quick summary
- Look up the terms used across Assuric and these docs. Each entry is short and links to the page that covers it in full.
- A few pairs are easy to mix up: requirement and task, role and permission level, checklist item and task, document version and hazard log version.
Compliance
| Term | Meaning |
|---|---|
| Framework | A compliance standard Assuric tracks for you, such as ISO 9001, DSPT or DCB0129. Assuric enables it once for your workspace. See Frameworks: Overview |
| Requirement | What a framework asks for, in the standard’s own wording. You can’t edit the wording, but you can set its Status (Not met, Partially met, Met or Not applicable) and its Owner(s). Status is worked out from its tasks, and you can also set it by hand. See Framework progress |
| Task | The work that satisfies one or more requirements. One task can count towards requirements in several frameworks at once. Its status is Not started, In progress, Completed or Not applicable. See Tasks: Overview |
| Product | Something you build, added on the Products page with a description, optional owners and the frameworks that apply to it. Its record shows those frameworks, plus the key documents and evidence tagged to it. See Adding a product |
| Product-specific task | A task done once for each product you map a framework to. DTAC, DCB0129 and Class I UK MD are mostly made of these, and ISO 9001, ISO 13485 and GDPR include some. See Product-specific tasks and Frameworks: Overview |
| Area | A group of related frameworks and registers in the sidebar: Quality, Clinical Safety, Clinical Governance and Privacy & Security |
People
| Term | Meaning |
|---|---|
| Permission level | What someone can do in Assuric: Admin, User, View-only or Staff portal only. The People table and some other screens use other names: Viewer for View-only, Editor for User, and Staff Portal for Staff portal only. See Permissions and access |
| Role | A formal responsibility, such as Clinical Safety Officer. It decides what’s assigned to someone, not what they can do in Assuric. See Roles and groups |
| Key role | One of five roles (DPO, SIRO, CSO, HPO and HSO) where Assuric asks for appointment details, saved as an Experience Record in Evidence & Files. See Roles and groups |
| Group | A set of people who get the same work, such as your Clinical Safety Team. See Assigning owners and responsibilities |
| Owner | The person responsible for a document, requirement, risk, supplier or product, picked from People rather than typed in. See Assigning owners and responsibilities |
| Checklist | A set of checklist items assigned to groups and roles. Its audience is Staff (shown on the staff portal) or Administrative (completed by an Admin on someone’s behalf). See Checklists: Overview |
| Checklist item | One thing to do in a checklist, such as accepting a policy or completing a training module. Not the same as a task. See Checklists: Overview |
| Training module | Training that reaches people through a checklist item. Two Digital Care Hub eLearning courses ship built in, and you can add your own. See Training modules and completion status |
| Staff portal | The separate, simpler site where staff complete their checklists and training, and report incidents. See Staff Portal |
Documents and records
| Term | Meaning |
|---|---|
| Document | Anything you write and approve, such as a policy or procedure, with a version history. See Creating a document |
| Document version | The status and number shown next to a document’s title, such as Draft v0.1 or Approved v2.0. An approved version stays in use until you approve the next one. See Document versioning |
| Republish options | When you approve a new document version, the choice of which places that use the document (Trust Centre resources, staff portal resources and checklist items) move to it. See Document versioning |
| Controlled document | A document with a Document ID and a formal review and approval cycle. It’s locked while the cycle runs and once approved. Switched on per workspace. See Controlled documents |
| Placeholder | A piece of information kept the same across your documents. It either pulls live information from elsewhere in Assuric or holds text you define. See Placeholders |
| Template | A starting point for a new document, from Assuric or your own organisation. See Templates |
| Evidence | Proof that supports a claim: notes, links, files, screenshots. It lives in Documents → Evidence & Files and isn’t versioned or approved. See Evidence and files |
| Trust Centre | A public page where customers and NHS governance teams see the compliance evidence you choose to publish. See Trust Centre |
| Trust Centre resource | An item you add to your Trust Centre, such as an approved document, a certificate or a hazard log. A resource can be public, or gated behind an access request. See Trust Centre: Overview |
Quality
| Term | Meaning |
|---|---|
| Procedure | The document that says how you do something. It’s versioned and approved like any other document. See Procedures and records |
| Record | The proof that you did it: dated evidence rather than a document. Record tasks ask for it. See Procedures and records |
| Review cycle | The path a controlled document takes: Draft, Pending Review, Pending Approval, then Approved. Everyone in Must review and Must approve, people or roles, has to act before it moves on. See Review cycle and statuses |
Clinical safety
| Term | Meaning |
|---|---|
| Hazard log | Your clinical risk record, built from hazards, their causes and controls, and the evidence behind them. See Clinical Safety |
| Hazard | Something about your product that could lead to harm. See Create a hazard |
| Cause | A specific way a hazard could come about. See Causes, controls and evidence |
| Control | Something you do that reduces a cause or its effect. See Causes, controls and evidence |
| Initial risk | In the hazard log, a hazard’s risk rated with its existing controls in place, before additional controls. The Risk register’s Inherent risk is a different measure: a risk’s score before any controls, Likelihood times Impact from 1 to 25. See Create a hazard and How risks are scored |
| Residual risk | The risk that remains once the controls are in place, not once they’re planned. See Risk scales and thresholds |
| ALARP | As low as reasonably practicable. From an Undesirable residual rating upwards (3 on the default matrix), Assuric asks you to confirm it, with a risk-benefit justification. See What happens at 3 and above |
| Incident | Something that happened, clinical or security, recorded in the incident log. See Create an incident |
| Hazard log version | An approved snapshot of one product’s hazard log. Each product is approved separately. See Approve and version your hazard log |
| Published hazard log | A bundle of approved versions, one per product, shared through your Trust Centre. See Share and publish your hazard log |
Privacy and security
| Term | Meaning |
|---|---|
| Supplier | A vendor you rely on. You add it from Assuric’s catalogue where you can, and set its Risk Rating and Agreements on its row. See Suppliers |
| Asset | An information asset you hold, with an auto-numbered ID, a classification and a criticality. Devices are assets too. See Assets |
| Risk register | Where you score and treat information security risks, and link security incidents to the risks they realised. See Risk register |
In the app
| Term | Meaning |
|---|---|
| Workspace | Your organisation’s own Assuric, which covers every framework you need in one place. Workspace in the sidebar holds Activity, Integrations and Settings. See What is Assuric |
| Sheet | The panel that opens when you click a task, person or other record. See Tasks: Overview |
| Activity | The workspace-wide audit trail of who changed what, under Workspace in the sidebar. See Activity log |
| Ask Assuric | Assuric’s AI assistant, opened from Ask at the top of the sidebar or with Ctrl+J. It has three modes: Auto, Hazard Log Assistant and Questionnaire Assistant. See Ask Assuric |
Abbreviations
| Abbreviation | Stands for |
|---|---|
| ALARP | As low as reasonably practicable. See Risk scales and thresholds |
| CAPA | Corrective and preventive action. See CAPA and non-conformances |
| CQC | Care Quality Commission, the regulator of health and social care in England. See Frameworks: Overview |
| CSO | Clinical Safety Officer. See Roles and groups |
| DPIA | Data protection impact assessment. See Generate a DPIA |
| DPO | Data Protection Officer. See Roles and groups |
| DSPT | Data Security and Protection Toolkit. See DSPT |
| DTAC | Digital Technology Assessment Criteria. See Complete and generate a DTAC form |
| HPO | HIPAA Privacy Officer. See Roles and groups |
| HSO | HIPAA Security Officer. See Roles and groups |
| MCP | Model Context Protocol. See Connect an AI assistant with the Assuric MCP Server |
| RoPA | Records of Processing Activities. See Data processing and DPIAs |
| SaMD | Software as a medical device. See Adding a product |
| SIRO | Senior Information Risk Owner. See Roles and groups |
Related articles
What is Assuric
What Assuric is for, and where to start.
Navigating Assuric
Sign in, and learn the sidebar and header.