DSPT Evidence: Supplier assurance or DSPT completion confirmation from suppliers handling patient data
VeriPath has one supplier that handles or has access to patient data:
| Detail | Value |
|---|---|
| Supplier | Fasthosts Internet Ltd |
| Service | VPS hosting (primary: 88.208.212.211, backup: 77.68.112.126) |
| Contract | Monthly rolling (active) |
| Data processed | Patient booking data hosted on our VPS; Fasthosts provide infrastructure only and do not access application data |
| Contact | Fasthosts customer portal / support ticket system |
| Certification | ISO 27001 (certificate available via Fasthosts customer portal) |
| Last verified | 26 May 2026 |
No other suppliers handle or process patient data on behalf of VeriPath.
Fasthosts Internet Ltd holds ISO 27001 certification (current, verifiable via their customer portal). This satisfies the DSPT requirement for IT supplier cyber security certification.
Verification method: certificate viewed in Fasthosts customer portal; certification body and expiry date confirmed.
| Handled by Fasthosts | Handled by VeriPath |
|---|---|
| Physical server infrastructure | All application configuration |
| Network connectivity | Firewall rules (UFW) |
| Hypervisor / virtualisation | Operating system hardening |
| Data centre physical security | Access control (WireGuard VPN, SSH keys) |
| Hardware maintenance | Data encryption |
| Backup and restore | |
| Vulnerability scanning and patching |
Patient data never leaves our control — we manage encryption, access, and security at the OS and application layer. Fasthosts provides the underlying infrastructure only.
| Evidence | Location |
|---|---|
| Supplier register | This page (/policies/standard_10) |
| ISO 27001 certification | Fasthosts customer portal (certificate available for download) |
| Contract / account confirmation | Fasthosts billing portal |
| Supplier contact details | Fasthosts support portal |