> ## Documentation Index
> Fetch the complete documentation index at: https://docs.assuric.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Glossary

> A quick guide to the terms used in Assuric and these docs, with links to learn more.

<Note>
  **Quick summary**

  * Look up the terms used across Assuric and these docs. Each entry is short and links to the page that covers it in full.
  * A few pairs are easy to mix up: requirement and task, role and permission level, checklist item and task, document version and hazard log version.
</Note>

## Compliance

| Term | Meaning |
| - | - |
| **Framework** | A compliance standard Assuric tracks for you, such as ISO 9001, DSPT or DCB0129. Assuric enables it once for your workspace. See [Frameworks: Overview](/frameworks/key-capabilities) |
| **Requirement** | What a framework asks for, in the standard's own wording. You can't edit the wording, but you can set its Status (Not met, Partially met, Met or Not applicable) and its Owner(s). Status is worked out from its tasks, and you can also set it by hand. See [Framework progress](/frameworks/tracking-and-mapping) |
| **Task** | The work that satisfies one or more requirements. One task can count towards requirements in several frameworks at once. Its status is Not started, In progress, Completed or Not applicable. See [Tasks: Overview](/tasks/key-capabilities) |
| **Product** | Something you build, added on the **Products** page with a description, optional owners and the frameworks that apply to it. Its record shows those frameworks, plus the key documents and evidence tagged to it. See [Adding a product](/getting-started/adding-a-product) |
| **Product-specific task** | A task done once for each product you map a framework to. DTAC, DCB0129 and Class I UK MD are mostly made of these, and ISO 9001, ISO 13485 and GDPR include some. See [Product-specific tasks](/tasks/product-specific-tasks) and [Frameworks: Overview](/frameworks/key-capabilities#organisation-wide-and-per-product-work) |
| **Area** | A group of related frameworks and registers in the sidebar: Quality, Clinical Safety, Clinical Governance and Privacy & Security |

## People

| Term | Meaning |
| - | - |
| **Permission level** | What someone can do in Assuric: **Admin**, **User**, **View-only** or **Staff portal only**. The People table and some other screens use other names: **Viewer** for View-only, **Editor** for User, and **Staff Portal** for Staff portal only. See [Permissions and access](/people/permissions-and-access) |
| **Role** | A formal responsibility, such as Clinical Safety Officer. It decides what's assigned to someone, not what they can do in Assuric. See [Roles and groups](/people/roles-and-groups) |
| **Key role** | One of five roles (DPO, SIRO, CSO, HPO and HSO) where Assuric asks for appointment details, saved as an **Experience Record** in **Evidence & Files**. See [Roles and groups](/people/roles-and-groups#key-roles) |
| **Group** | A set of people who get the same work, such as your Clinical Safety Team. See [Assigning owners and responsibilities](/people/assigning-owners-and-responsibilities) |
| **Owner** | The person responsible for a document, requirement, risk, supplier or product, picked from People rather than typed in. See [Assigning owners and responsibilities](/people/assigning-owners-and-responsibilities) |
| **Checklist** | A set of checklist items assigned to groups and roles. Its **audience** is **Staff** (shown on the staff portal) or **Administrative** (completed by an Admin on someone's behalf). See [Checklists: Overview](/people/checklists) |
| **Checklist item** | One thing to do in a checklist, such as accepting a policy or completing a training module. Not the same as a task. See [Checklists: Overview](/people/checklists) |
| **Training module** | Training that reaches people through a checklist item. Two Digital Care Hub eLearning courses ship built in, and you can add your own. See [Training modules and completion status](/people/training-modules) |
| **Staff portal** | The separate, simpler site where staff complete their checklists and training, and report incidents. See [Staff Portal](/people/staff-portal) |

## Documents and records

| Term | Meaning |
| - | - |
| **Document** | Anything you write and approve, such as a policy or procedure, with a version history. See [Creating a document](/documents/creating-a-document) |
| **Document version** | The status and number shown next to a document's title, such as Draft v0.1 or Approved v2.0. An approved version stays in use until you approve the next one. See [Document versioning](/documents/versions-and-version-history) |
| **Republish options** | When you approve a new document version, the choice of which places that use the document (Trust Centre resources, staff portal resources and checklist items) move to it. See [Document versioning](/documents/versions-and-version-history#republish-options) |
| **Controlled document** | A document with a Document ID and a formal review and approval cycle. It's locked while the cycle runs and once approved. Switched on per workspace. See [Controlled documents](/quality/controlled-documents) |
| **Placeholder** | A piece of information kept the same across your documents. It either pulls live information from elsewhere in Assuric or holds text you define. See [Placeholders](/documents/placeholders) |
| **Template** | A starting point for a new document, from Assuric or your own organisation. See [Templates](/documents/templates-and-document-catalogue) |
| **Evidence** | Proof that supports a claim: notes, links, files, screenshots. It lives in **Documents** → **Evidence & Files** and isn't versioned or approved. See [Evidence and files](/documents/evidence) |
| **Trust Centre** | A public page where customers and NHS governance teams see the compliance evidence you choose to publish. See [Trust Centre](/trust-centre/key-capabilities) |
| **Trust Centre resource** | An item you add to your Trust Centre, such as an approved document, a certificate or a hazard log. A resource can be public, or gated behind an access request. See [Trust Centre: Overview](/trust-centre/key-capabilities) |

## Quality

| Term | Meaning |
| - | - |
| **Procedure** | The document that says how you do something. It's versioned and approved like any other document. See [Procedures and records](/quality/procedures-and-records) |
| **Record** | The proof that you did it: dated evidence rather than a document. Record tasks ask for it. See [Procedures and records](/quality/procedures-and-records#records) |
| **Review cycle** | The path a controlled document takes: **Draft**, **Pending Review**, **Pending Approval**, then **Approved**. Everyone in **Must review** and **Must approve**, people or roles, has to act before it moves on. See [Review cycle and statuses](/quality/review-cycle-and-statuses) |

## Clinical safety

| Term | Meaning |
| - | - |
| **Hazard log** | Your clinical risk record, built from hazards, their causes and controls, and the evidence behind them. See [Clinical Safety](/clinical-safety/key-capabilities) |
| **Hazard** | Something about your product that could lead to harm. See [Create a hazard](/clinical-safety/hazard-log) |
| **Cause** | A specific way a hazard could come about. See [Causes, controls and evidence](/clinical-safety/causes-and-controls#the-four-objects) |
| **Control** | Something you do that reduces a cause or its effect. See [Causes, controls and evidence](/clinical-safety/causes-and-controls#the-four-objects) |
| **Initial risk** | In the hazard log, a hazard's risk rated with its existing controls in place, before additional controls. The Risk register's **Inherent risk** is a different measure: a risk's score before any controls, Likelihood times Impact from 1 to 25. See [Create a hazard](/clinical-safety/hazard-log) and [How risks are scored](/privacy-security/risk-register#how-risks-are-scored) |
| **Residual risk** | The risk that remains once the controls are in place, not once they're planned. See [Risk scales and thresholds](/clinical-safety/risk-scales-and-thresholds) |
| **ALARP** | As low as reasonably practicable. From an Undesirable residual rating upwards (3 on the default matrix), Assuric asks you to confirm it, with a risk-benefit justification. See [What happens at 3 and above](/clinical-safety/risk-scales-and-thresholds#what-happens-at-3-and-above) |
| **Incident** | Something that happened, clinical or security, recorded in the incident log. See [Create an incident](/clinical-safety/incidents) |
| **Hazard log version** | An approved snapshot of one product's hazard log. Each product is approved separately. See [Approve and version your hazard log](/clinical-safety/hazard-log-approvals) |
| **Published hazard log** | A bundle of approved versions, one per product, shared through your Trust Centre. See [Share and publish your hazard log](/clinical-safety/sharing-and-publishing#publish-a-hazard-log) |

## Privacy and security

| Term | Meaning |
| - | - |
| **Supplier** | A vendor you rely on. You add it from Assuric's catalogue where you can, and set its **Risk Rating** and **Agreements** on its row. See [Suppliers](/privacy-security/suppliers) |
| **Asset** | An information asset you hold, with an auto-numbered ID, a classification and a criticality. Devices are assets too. See [Assets](/privacy-security/assets) |
| **Risk register** | Where you score and treat information security risks, and link security incidents to the risks they realised. See [Risk register](/privacy-security/risk-register) |

## In the app

| Term | Meaning |
| - | - |
| **Workspace** | Your organisation's own Assuric, which covers every framework you need in one place. **Workspace** in the sidebar holds Activity, Integrations and Settings. See [What is Assuric](/assuric-overview/what-is-assuric) |
| **Sheet** | The panel that opens when you click a task, person or other record. See [Tasks: Overview](/tasks/key-capabilities#what-happens-when-you-open-a-task) |
| **Activity** | The workspace-wide audit trail of who changed what, under **Workspace** in the sidebar. See [Activity log](/settings/audit-log) |
| **Ask Assuric** | Assuric's AI assistant, opened from **Ask** at the top of the sidebar or with Ctrl+J. It has three modes: **Auto**, **Hazard Log Assistant** and **Questionnaire Assistant**. See [Ask Assuric](/ask-assuric/overview) |

## Abbreviations

| Abbreviation | Stands for |
| - | - |
| **ALARP** | As low as reasonably practicable. See [Risk scales and thresholds](/clinical-safety/risk-scales-and-thresholds#what-happens-at-3-and-above) |
| **CAPA** | Corrective and preventive action. See [CAPA and non-conformances](/quality/capa-and-non-conformances) |
| **CQC** | Care Quality Commission, the regulator of health and social care in England. See [Frameworks: Overview](/frameworks/key-capabilities#framework-specific-additions) |
| **CSO** | Clinical Safety Officer. See [Roles and groups](/people/roles-and-groups#key-roles) |
| **DPIA** | Data protection impact assessment. See [Generate a DPIA](/privacy-security/data-processing#generate-a-dpia) |
| **DPO** | Data Protection Officer. See [Roles and groups](/people/roles-and-groups#key-roles) |
| **DSPT** | Data Security and Protection Toolkit. See [DSPT](/privacy-security/dspt) |
| **DTAC** | Digital Technology Assessment Criteria. See [Complete and generate a DTAC form](/privacy-security/dtac) |
| **HPO** | HIPAA Privacy Officer. See [Roles and groups](/people/roles-and-groups#key-roles) |
| **HSO** | HIPAA Security Officer. See [Roles and groups](/people/roles-and-groups#key-roles) |
| **MCP** | Model Context Protocol. See [Connect an AI assistant with the Assuric MCP Server](/integrations/mcp-server) |
| **RoPA** | Records of Processing Activities. See [Data processing and DPIAs](/privacy-security/data-processing) |
| **SaMD** | Software as a medical device. See [Adding a product](/getting-started/adding-a-product) |
| **SIRO** | Senior Information Risk Owner. See [Roles and groups](/people/roles-and-groups#key-roles) |

## Related articles

<Columns cols={2}>
  <Card title="What is Assuric" icon="info" href="/assuric-overview/what-is-assuric">
    What Assuric is for, and where to start.
  </Card>

  <Card title="Navigating Assuric" icon="map" href="/assuric-overview/navigating-assuric">
    Sign in, and learn the sidebar and header.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.