Set up
61 of 64 answered. 9 to confirm.
Step 6 of 7
Data and security
Primary hosting provider · required
AWS, London region
From the architecture overview
Where is patient data processed? · required
UK only UK and EU Outside the UK and EU
From the DPIA draft
Minimum password length · required
Two sources disagree
Critical patch timescale · required
14 days
Answered by Balraj, 8 Oct
Backup retention · required
35 days
From the architecture overview
Do you hold Cyber Essentials?
Yes In progress No
Answered by Zak, 9 Oct