Security & Compliance FAQs

Valident is designed to operate within a UK-hosted environment and does not routinely transfer referral data internationally as part of standard operation. Where bespoke integrations are required, data flow considerations are discussed transparently. Maintaining UK hosting provides clarity around data jurisdiction.

Yes. Referral and messaging data stored within Valident is encrypted within the database. Data is also encrypted in transit. Every connection to Valident is made over HTTPS using TLS 1.2 or higher. Encryption ensures information is not held in readable plain text. This is combined with authenticated dashboard access so that only authorised users within […]

Valident has been developed with UK GDPR principles in mind, recognising that dental referrals involve sensitive personal and clinical information. While compliance ultimately remains the responsibility of the practice as Data Controller, the platform supports structured and responsible data handling. Referral and messaging data is stored in encrypted format and accessed through authenticated dashboards rather […]

Email referrals can be misdirected, forwarded unintentionally or stored indefinitely in inboxes. Valident replaces email-based workflows with a structured platform where referral information is submitted through secure forms and managed within authenticated dashboards. This reduces exposure and improves oversight.

Referral data is protected using encrypted storage, controlled dashboard access and structured communication workflows. Information is not sent in plain text email chains but instead remains within the secure platform environment. Access permissions are managed by each practice, ensuring only authorised users can view or manage referrals. Combined with UK-based hosting and defined retention policies, […]

Valident has been developed with awareness of the regulatory environment in which UK dental practices operate, including CQC oversight. The platform supports structured workflows, controlled access and defined retention policies, aligning with good information governance practices.

Valident follows data minimisation principles. By default, referral data is retained for 28 days, helping to reduce unnecessary long-term storage of sensitive information. Retention settings can be configured where appropriate to align with operational requirements. The platform is designed to support secure handling and short-term management rather than indefinite storage.

Valident operates within a UK data centre environment aligned with ISO 27001 standards. Encrypted storage, controlled access and structured retention form part of a layered security approach. Valident is also working towards Cyber Essentials certification.

Valident is hosted within the United Kingdom in a London-based data centre environment operating to ISO 27001 standards. Referral data is stored within the secure Valident platform in encrypted format. The system is designed to avoid unnecessary international data transfer. By maintaining UK hosting, practices benefit from clarity around jurisdiction and regulatory oversight. All access […]

Access is restricted to authorised users within each practice. Valident operates through authenticated dashboards, allowing practices to manage internal permissions. This reduces exposure compared to email-based referral workflows where messages may be forwarded or stored across multiple inboxes.