Compliance & Certifications

Cyber Essentials is the UK Government-backed minimum standard scheme that protects against the most common cyber attacks: things like phishing, malware, password guessing and unpatched software. Certification means our firewalls, device configuration, access controls, malware protection and software updates have been assessed against the National Cyber Security Centre's requirements.

Certified organisation	West Country Automation Ltd
Certification body	The IASME Consortium Ltd
Date of certification	6 August 2026
Valid to	6 August 2027
Scope	Whole organisation
Certificate ID	d7997fab-9d82-4b0a-a0fb-150f86059aaf

Certification is renewed annually, so this page will always show the current certificate.

We are registered with the Information Commissioner’s Office, the UK’s independent data protection regulator, under registration number ZC186083. Every UK organisation that processes personal data is required to register and pay the data protection fee; registration also means the ICO knows who we are and can hold us to account under UK GDPR.

How we actually collect, use and protect personal data is set out in our privacy notice.

We have completed the NHS Data Security and Protection Toolkit (DSPT), the annual self-assessment the NHS uses to check that organisations handling health and social care data meet the required standards for data security and information governance. It covers the National Data Guardian’s ten data security standards: staff responsibilities, training, secure processes, and how incidents are managed and reported.

This matters because much of our work is building and hosting bespoke software for care sector organisations, where the data involved is some of the most sensitive there is. The DSPT is reassessed every year.

Before any live data is shared with us, both parties sign a Data Processing Agreement (DPA), reviewed and signed off by a specialist barrister to ensure it reflects the latest data protection legislation. This means we operate to the highest legal standard, not just industry best practice.