Assuric
Entrepreneur First '24London, GB · Founded 2024 · 3 known investors
Assuric offers an AI-based compliance platform built for the healthtech sector. It replaces spreadsheet-driven, manual processes so digital health and AI companies can meet regulatory requirements more quickly and get products deployed sooner.
Also known as Assuric Compliance
Founders & leadership
Assuric was founded in 2024 by Paul Jewell and Matt Jennings.
Investors · 3
Company profile
researched Aug 2026Assuric provides a compliance platform for digital health companies and healthcare organisations, combining software automation with expert services. The platform is positioned as a single source of truth covering an Information Security Management System (ISMS), a Quality Management System (QMS) and a Clinical Safety Management System (CSMS), and addresses frameworks including GDPR, NHS DTAC, the NHS Data Security and Protection Toolkit (DSPT), DCB0129, Cyber Essentials and ISO standards such as ISO 27001. Customers are onboarded via a gap analysis and upload of existing documentation, then use automated task tracking, alerts and AI tooling to close gaps, before progressing to audit, certification and ongoing maintenance.
Product features described on the company site include AI-driven policy generation, evidence collection, change reporting and gap analysis; document and policy management with review and approval workflows; clinical risk management with hazard logs, clinical safety case reporting, incident management and post-deployment monitoring; information security management covering control tracking, asset and supplier management and security risk treatment; staff training and compliance tracking; a Trust Centre for publishing compliance evidence; and automated internal audit and external certification support. Service elements include fractional Clinical Safety Officers and Data Protection Officers, CREST-accredited penetration testing, and consultancy ranging from standard support to a fully managed engagement. An Assuric MCP Server was announced as newly released on the company website.
For NHS DTAC specifically, Assuric maps its offering to the five DTAC pillars — clinical safety (DCB0129 deliverables such as the Clinical Risk Management Plan, Hazard Log and Clinical Safety Case Report), data protection (GDPR, DSPT, Record of Processing Activities, Information Asset Register, DPIAs), technical security (Cyber Essentials and Cyber Essentials Plus), interoperability (integration strategy, EHR integration and APIs) and usability/accessibility (WCAG 2.2 AA, user journey mapping, accessibility statements) — and states that requirements can be mapped across frameworks to avoid duplicated work.
Founding story
Assuric was co-founded by Dr. Paul Jewell (CEO), an NHS doctor, clinical researcher and experienced Clinical Safety Officer, and Matt Jennings (CTO), an ex-Palantir software engineer, physicist and certified Cyber Security Assessor. The company describes itself as a team of software developers and doctors with the stated mission of accelerating the safe, effective and secure deployment of digital health technology.
Business model
Assuric sells a compliance software platform to digital health companies and healthcare organisations, layered with expert services: fractional Clinical Safety Officers and Data Protection Officers, consultancy (standard support or a fully managed "white-glove" service), staff training, and CREST-accredited penetration testing that can be booked separately. Prospects are converted via demo bookings and intro calls. Specific pricing is not disclosed in the sources.
Traction
Public testimonials from executives at Heim (CEO Kelly Klifa), Tandem (Katie Baker, Director UK & Ireland), VitVio (COO Maks Kozarzewski), Healthnix (CEO Maja Mazur) and DPM (Clinical Director Dean Mawson) describe achieving DCB0129, DTAC, DSPT, GDPR and cybersecurity compliance using the platform. The company states it is trusted by both digital health companies and healthcare organisations. No revenue, customer-count or usage metrics are disclosed in the sources.
Latest developments
The website announces the release of the Assuric MCP Server, extending its AI-powered compliance features. The team page lists a broader staff roster including a Founding AI Engineer (Billy Byiringiro), Founding Engineer (Matthew Titmas), Software Engineer (Dominic Taylor, ex-Improbable), Growth Founder's Associate (Cordi Mahony), Operations Associate (Mira Hoteit), Data Protection Expert (Simon Pillinger) and Clinical Safety Officer (Yasmin Karsan), plus advisors Dr. Avi Mehra (IBM), Dr. Jonathan Andrews (CQC) and Laurence Bargery (co-founder and CTO of Accurx).
▸Full profile — market position, technology, go-to-market, geography, history, risks & controversies
Market position
Positions itself as a specialist, all-in-one automated compliance solution for digital health, in contrast to generic compliance tooling, spreadsheets, manual processes and outsourced consultancies. Startup Map London classifies it as a seed-stage company in the AI, medical device and health tech categories. The company describes itself as designed by clinicians and clinical safety and data security experts.
Domain specialisation in healthcare-specific frameworks (DCB0129, DTAC, DSPT) alongside generic security standards, delivery of ISMS, QMS and CSMS in a single platform, in-house clinical and data protection expertise available as fractional CSO/DPO services, and AI/MCP-based automation. Assuric also states it maintains its own Cyber Essentials, Cyber Essentials Plus and independently verified ISO 27001 certification from a UKAS-accredited certification body, publishing certificates via a public Trust Centre.
Technology
An AI-native web platform that centralises compliance documentation and evidence. Stated AI capabilities include policy generation, evidence collection, change reporting and gap analysis, plus a recently released Assuric MCP (Model Context Protocol) server. The product automates document creation, review and approval workflows, control tracking, compliance dashboards and alerts, hazard logs and automated report writing, and internal audits. Infrastructure practices described include separated development, staging, preview and production environments, third-party identity and access management (Assuric does not store user passwords), logical segregation of customer data, AES-256 encryption at rest and TLS in transit, secrets management, RBAC with least-privilege access, endpoint monitoring, multi-availability-zone hosting with high-availability architecture, automated and static code testing, dependency audits, threat modelling and at least annual penetration testing.
Go-to-market
Direct sales driven from the website through "Book a demo" and contact forms with a stated 24-hour response target, supported by customer testimonials from digital health companies. The team includes a Growth Founder's Associate working across sales, marketing and customer success. Framework-specific landing pages (for example NHS DTAC) with detailed explanatory FAQ content serve as inbound content.
Digital health and healthtech companies of all sizes — including SMEs selling into the NHS — and healthcare organisations that must satisfy NHS and UK regulatory frameworks. Named users referenced in testimonials include Heim, Tandem, VitVio, Healthnix and DPM (DPM Clinical), and roles addressed include Clinical Safety Officers and digital project teams.
Geography
Focused on the United Kingdom, with content oriented to NHS procurement frameworks (DTAC, DSPT, DCB0129, Cyber Essentials) and UK/EU GDPR; listed on Startup Map London. One testimonial references helping a customer navigate regulatory compliance specifically in the UK.
History
The public sources do not describe a funding or milestone history. Startup Map London lists the company at seed stage, and the website announces the release of the Assuric MCP Server as a recent product development.
Risks & controversies
No controversies, disputes or negative coverage appear in the sources. Notable profile risks are informational: no disclosed funding, revenue or customer metrics are publicly available, and the business is concentrated on UK/NHS-specific regulatory frameworks whose evolution the company itself cites as a market challenge.
Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Timeline · 2
launches, deals, and filingsAssuric announced on its website that the Assuric MCP Server has been released, extending its AI-powered compliance capabilities.
Assuric states it actively maintains Cyber Essentials and Cyber Essentials Plus certifications alongside an independently verified ISO 27001 certification issued by a UKAS-accredited certification body, with certificates published on its public Trust Centre.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
▸Research sources · 8
primary sources listed
- Assuricassuric.com · web
8 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Assuric do?
- UK-based AI compliance platform helping digital health companies meet NHS DTAC, DCB0129, GDPR and ISO requirements.
- Who founded Assuric?
- Assuric was founded by Paul Jewell, Matt Jennings in 2024.
- Who are Assuric's investors?
- Assuric's investors include Entrepreneur First, Mount VC, Transpose Platform Management.
- Where is Assuric headquartered?
- Assuric is headquartered in London, GB.