> ## Documentation Index
> Fetch the complete documentation index at: https://docs.assuric.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy & Security FAQ

> Quick answers to the things customers ask us most.

<AccordionGroup>
  <Accordion title="Where do I submit my DSPT?">
    Not through Assuric. DSPT is submitted directly to NHS England through the DSPT portal. Assuric tracks your progress as a framework, and Ask Assuric's AI assistant can draft your questionnaire answers from your workspace documentation with citations, but you check them and copy them into the portal yourself. See [DSPT](/privacy-security/dspt).
  </Accordion>

  <Accordion title="Where is my RoPA?">
    In **Privacy & Security → Data Processing**. It's the register of your processing activities, not a separate feature. See [Data processing and DPIAs](/privacy-security/data-processing).
  </Accordion>

  <Accordion title="Where do DPIAs live?">
    In **Documents → Templates**, not in a dedicated DPIA register or module. Creating a document from the DPIA template gives you a DPIA you can attach to the processing activity it covers. See [Data processing and DPIAs](/privacy-security/data-processing#generate-a-dpia).
  </Accordion>

  <Accordion title="What's the fastest way to fill in Suppliers, Assets and Data Processing?">
    Add your suppliers from the built-in catalogue first. Assuric suggests assets and processing activities based on what each supplier typically provides, so starting there fills in most of the chain rather than filling in 3 registers by hand. Then keep the processing register to the activities that involve personal data. See [Privacy & Security: Overview](/privacy-security/key-capabilities).
  </Accordion>

  <Accordion title="Is Devices a separate register from Assets?">
    No. **Devices** is a saved filter on **Assets**, the same records and the same underlying table. Most device records arrive automatically with a *Source* of *User reported*, when a colleague registers their device through the staff portal. You can also add one directly. See [Devices](/privacy-security/assets#devices).
  </Accordion>

  <Accordion title="What makes a supplier show up on my Trust Centre as a subprocessor?">
    Turning on the *Subprocessor* flag under a supplier's *Data Information*. Trust Centre subprocessor publishing reads that flag. See [Suppliers](/privacy-security/suppliers).
  </Accordion>

  <Accordion title="Do security incidents get logged separately from clinical incidents?">
    No. **Incidents** is one shared table with **Clinical Safety**, split by a *Security*/*Clinical* filter, not 2 separate logs. See [Incidents overview](/privacy-security/incidents-overview).
  </Accordion>
</AccordionGroup>

## Related articles

<Columns cols={2}>
  <Card title="Privacy & Security: Overview" icon="lock" href="/privacy-security/key-capabilities">
    The registers, frameworks and logs in this area.
  </Card>

  <Card title="Suppliers" icon="store" href="/privacy-security/suppliers">
    Add the vendors you rely on from Assuric's supplier catalogue.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.