Independent Assessment | Expert Guidance | DSPToolkit

Supporting Health & Care Organisations to Strengthen Data Protection & DSPT Compliance

Citrus Suite offers a DSP Toolkit Audit and Support Service designed to provide health and care organisations with an independent review of their NHS Data Security and Protection Toolkit (DSPT) submissions.

This service helps ensure your organisation’s data protection controls are aligned with NHS expectations and provides clear, practical advice for ongoing improvement.


DSP Toolkit Support for Your Organisation

  • Private Healthcare Providers delivering NHS-funded care
  • Pharmacies, Social Care Providers, Community Health Organisations
  • Charities, CICs, and suppliers accessing NHS patient data
  • Startups and vendors preparing for DSPT compliance to support NHS contracts
  • Category 2, 3 or 4 organisations under the NHS DSPT model

Whether you’re preparing your first submission or completing an annual review, Citrus Suite offers a tailored audit with sector-specific expertise.


DSP Toolkit Audit; independent assessment & audit report

  • Independent Audit of DSPT Submission
    Our team reviews the evidence supporting your self-assessment to ensure alignment with NHS guidance.
  • Gap Analysis & Actionable Report
    We identify inconsistencies, missing controls, or areas where requirements may not be fully met; and provide a clear, prioritised action plan.
  • Platform & Process Review
    If you’re using digital tools like portals, apps or databases, we review technical components such as access controls, hosting, backups, and data flows.
  • Support with Evidence Preparation
    We assist in producing, reviewing or refining required documents including DPIAs, policy templates, training logs, incident registers, and asset lists.
  • Follow-Up Review & Debrief
    This includes a virtual session to discuss findings, clarify risks, and provide practical guidance to close any gaps.
  • DSP TOOLKIT AUDIT, Read More

Why Work With Citrus Suite?

  • Healthcare-Focused Team: We’ve delivered 200+ digital platforms to NHS partners, insurers, and private providers.
  • DSPT-Aligned Build Experience: Our software systems are designed with data protection by design and default; we understand the toolkit from a practical delivery perspective.
  • Real-World Insight: We combine technical audits with operational knowledge, helping you understand issues.

Benefits of the Service

  • Independent review of your DSPT submission before or after upload
  • Clear actions to improve DSPT score and reduce data protection risk
  • Confidence that your systems and processes align with NHS expectations
  • Option to extend into platform upgrade or rebuild, if required
  • Suitable for internal assurance, board reporting, or third-party contracts

Find an independent DSP Toolkit assessment auditor

DSP Toolkit Help

To discuss your DSP Toolkit audit needs, contact our team today.
We’ll tailor the service to your organisation, size and digital setup.

📧 projects@citrussuite.com
📞 0151 345 1979