Security

Diagram showing multiple laptops connected in a network, with a red padlock at the center symbolizing cybersecurity or network security.

The DICT8 medical transcription system complies with NHS security features- we would not be in so many Trusts if it didn’t!

The security design principles for the DICT8 products are based on the requirements for all public-sector IT systems within the UK and specifically the NHS. The security system is robust on several levels and stems from the simplicity of the system. DICT8 is an ISO27001 certified organisation, has CE+, DSP Toolkit, DCB0129 and is on the HSCN.

Data Transmission

  • All data is sent to and from the DICT8 servers via HTTPS, encrypted (256-bit using a 2048 bit key) and verified (digitally signed).

  • DICT8 supports TLSv1.3 cryptography standards.

  • SHA-2 hashing for all certificates

  • The DICT8 servers sit behind a password protected hardware firewall.

  • All servers are dedicated (i.e. not shared with third parties).

  • All accounts are protected with strong passwords with MFA support.

  • Virus protection is implemented at the point of the firewall and on the data server.

  • The only time the doctor will need to download from our server onto their computer will be in the generation of the transcript (an .rtf file that is incapable of carrying any executable code).

  • All data can be transmitted through ports that are currently open on the Trust firewall thus there is no need to open any further ports.

  • DICT8 has an HSCN connection for PAS/EPR interfacing.

Data Confidentiality

  • The system is Caldicott compliant and we are registered with the ICO.

  • We are compliant with UK GDPR.

  • Username / Strong password combinations are required to access each area of the DICT8 system.

  • Any transcription is visible only to the allocated transcriber, the originating doctor and to delegated secretaries within the trust (specified by the Doctor).

  • Once the transcriber has finished the transcript, the task is entirely removed from their system.

  • All voice files are securely streamed via 256-bit encryption and not retained on the computer they are streamed to.

  • We do not store patient information.

  • Data does not go outside of the UK for processing, storage or any other reason.

  • We have PI cover in place.

Data Integrity

  • All data is stored in a dedicated secure proprietary server environment.

  • Physical access to servers is restricted and is compliant with PCI DSS, ISO27001 and SSAE 16/18 and ISAE 3402 standards.

  • All data is stored across multiple data volumes using RAID 5 technology.

  • All data is replicated in real-time to a second location for Disaster Recovery purposes.

  • A daily backup is performed on all data.

  • Attempted security breaches are logged and periodically audited. There have been no breaches during the history of the company.

  • All critical services are monitored 24x7x365.

Cyber Essentials Certified Plus badge with a checkmark and text on a blue background.
Certification badge for ISO 27001 Information Security Management, issued by UKAS Management Systems, featuring the British Assessment Bureau logo with blue, white, red, and black colors.