Glossary - Assuric Docs

Quick summary

Look up the terms used across Assuric and these docs. Each entry is short and links to the page that covers it in full.
A few pairs are easy to mix up: requirement and task, role and permission level, checklist item and task, document version and hazard log version.

Compliance

Term	Meaning
Framework	A compliance standard Assuric tracks for you, such as ISO 9001, DSPT or DCB0129. Assuric enables it once for your workspace. See Frameworks: Overview
Requirement	What a framework asks for, in the standard’s own wording. You can’t edit the wording, but you can set its Status (Not met, Partially met, Met or Not applicable) and its Owner(s). Status is worked out from its tasks, and you can also set it by hand. See Framework progress
Task	The work that satisfies one or more requirements. One task can count towards requirements in several frameworks at once. Its status is Not started, In progress, Completed or Not applicable. See Tasks: Overview
Product	Something you build, added on the Products page with a description, optional owners and the frameworks that apply to it. Its record shows those frameworks, plus the key documents and evidence tagged to it. See Adding a product
Product-specific task	A task done once for each product you map a framework to. DTAC, DCB0129 and Class I UK MD are mostly made of these, and ISO 9001, ISO 13485 and GDPR include some. See Product-specific tasks and Frameworks: Overview
Area	A group of related frameworks and registers in the sidebar: Quality, Clinical Safety, Clinical Governance and Privacy & Security

People

Term	Meaning
Permission level	What someone can do in Assuric: Admin, User, View-only or Staff portal only. The People table and some other screens use other names: Viewer for View-only, Editor for User, and Staff Portal for Staff portal only. See Permissions and access
Role	A formal responsibility, such as Clinical Safety Officer. It decides what’s assigned to someone, not what they can do in Assuric. See Roles and groups
Key role	One of five roles (DPO, SIRO, CSO, HPO and HSO) where Assuric asks for appointment details, saved as an Experience Record in Evidence & Files. See Roles and groups
Group	A set of people who get the same work, such as your Clinical Safety Team. See Assigning owners and responsibilities
Owner	The person responsible for a document, requirement, risk, supplier or product, picked from People rather than typed in. See Assigning owners and responsibilities
Checklist	A set of checklist items assigned to groups and roles. Its audience is Staff (shown on the staff portal) or Administrative (completed by an Admin on someone’s behalf). See Checklists: Overview
Checklist item	One thing to do in a checklist, such as accepting a policy or completing a training module. Not the same as a task. See Checklists: Overview
Training module	Training that reaches people through a checklist item. Two Digital Care Hub eLearning courses ship built in, and you can add your own. See Training modules and completion status
Staff portal	The separate, simpler site where staff complete their checklists and training, and report incidents. See Staff Portal

Documents and records

Term	Meaning
Document	Anything you write and approve, such as a policy or procedure, with a version history. See Creating a document
Document version	The status and number shown next to a document’s title, such as Draft v0.1 or Approved v2.0. An approved version stays in use until you approve the next one. See Document versioning
Republish options	When you approve a new document version, the choice of which places that use the document (Trust Centre resources, staff portal resources and checklist items) move to it. See Document versioning
Controlled document	A document with a Document ID and a formal review and approval cycle. It’s locked while the cycle runs and once approved. Switched on per workspace. See Controlled documents
Placeholder	A piece of information kept the same across your documents. It either pulls live information from elsewhere in Assuric or holds text you define. See Placeholders
Template	A starting point for a new document, from Assuric or your own organisation. See Templates
Evidence	Proof that supports a claim: notes, links, files, screenshots. It lives in Documents → Evidence & Files and isn’t versioned or approved. See Evidence and files
Trust Centre	A public page where customers and NHS governance teams see the compliance evidence you choose to publish. See Trust Centre
Trust Centre resource	An item you add to your Trust Centre, such as an approved document, a certificate or a hazard log. A resource can be public, or gated behind an access request. See Trust Centre: Overview

Quality

Term	Meaning
Procedure	The document that says how you do something. It’s versioned and approved like any other document. See Procedures and records
Record	The proof that you did it: dated evidence rather than a document. Record tasks ask for it. See Procedures and records
Review cycle	The path a controlled document takes: Draft, Pending Review, Pending Approval, then Approved. Everyone in Must review and Must approve, people or roles, has to act before it moves on. See Review cycle and statuses

Clinical safety

Term	Meaning
Hazard log	Your clinical risk record, built from hazards, their causes and controls, and the evidence behind them. See Clinical Safety
Hazard	Something about your product that could lead to harm. See Create a hazard
Cause	A specific way a hazard could come about. See Causes, controls and evidence
Control	Something you do that reduces a cause or its effect. See Causes, controls and evidence
Initial risk	In the hazard log, a hazard’s risk rated with its existing controls in place, before additional controls. The Risk register’s Inherent risk is a different measure: a risk’s score before any controls, Likelihood times Impact from 1 to 25. See Create a hazard and How risks are scored
Residual risk	The risk that remains once the controls are in place, not once they’re planned. See Risk scales and thresholds
ALARP	As low as reasonably practicable. From an Undesirable residual rating upwards (3 on the default matrix), Assuric asks you to confirm it, with a risk-benefit justification. See What happens at 3 and above
Incident	Something that happened, clinical or security, recorded in the incident log. See Create an incident
Hazard log version	An approved snapshot of one product’s hazard log. Each product is approved separately. See Approve and version your hazard log
Published hazard log	A bundle of approved versions, one per product, shared through your Trust Centre. See Share and publish your hazard log

Privacy and security

Term	Meaning
Supplier	A vendor you rely on. You add it from Assuric’s catalogue where you can, and set its Risk Rating and Agreements on its row. See Suppliers
Asset	An information asset you hold, with an auto-numbered ID, a classification and a criticality. Devices are assets too. See Assets
Risk register	Where you score and treat information security risks, and link security incidents to the risks they realised. See Risk register

In the app

Term	Meaning
Workspace	Your organisation’s own Assuric, which covers every framework you need in one place. Workspace in the sidebar holds Activity, Integrations and Settings. See What is Assuric
Sheet	The panel that opens when you click a task, person or other record. See Tasks: Overview
Activity	The workspace-wide audit trail of who changed what, under Workspace in the sidebar. See Activity log
Ask Assuric	Assuric’s AI assistant, opened from Ask at the top of the sidebar or with Ctrl+J. It has three modes: Auto, Hazard Log Assistant and Questionnaire Assistant. See Ask Assuric

Abbreviations

Abbreviation	Stands for
ALARP	As low as reasonably practicable. See Risk scales and thresholds
CAPA	Corrective and preventive action. See CAPA and non-conformances
CQC	Care Quality Commission, the regulator of health and social care in England. See Frameworks: Overview
CSO	Clinical Safety Officer. See Roles and groups
DPIA	Data protection impact assessment. See Generate a DPIA
DPO	Data Protection Officer. See Roles and groups
DSPT	Data Security and Protection Toolkit. See DSPT
DTAC	Digital Technology Assessment Criteria. See Complete and generate a DTAC form
HPO	HIPAA Privacy Officer. See Roles and groups
HSO	HIPAA Security Officer. See Roles and groups
MCP	Model Context Protocol. See Connect an AI assistant with the Assuric MCP Server
RoPA	Records of Processing Activities. See Data processing and DPIAs
SaMD	Software as a medical device. See Adding a product
SIRO	Senior Information Risk Owner. See Roles and groups

What is Assuric

What Assuric is for, and where to start.

Navigating Assuric

Sign in, and learn the sidebar and header.