GDPR & Security
CareKudos is designed to help care teams recognise great work without compromising the privacy of the people they support.
GDPR-safe recognition
Recognition posts are checked in real time for potential personal-data issues, helping staff identify information that should be removed or anonymised.
Role-based access
Users only see the information and features they are authorised to access.
Secure data
Data is encrypted using AES-256-GCM at rest and TLS 1.3 in transit.
Auditability
Recognition and evidence records provide an ongoing, organised record rather than relying on scattered documents and memories.
Data protection responsibilities
CareKudos acts as a Data Processor for Care Setting customer accounts and as a Data Controller for user account information. Care Settings remain responsible for the personal data of their staff and service users.
ICO registration
ICO Registration: ZC108498
Users remain responsible for the content they submit and must not include identifiable service-user information unless appropriately anonymised.