Corieva handles some of the most sensitive data a council holds. We are designing every part of the platform around that responsibility and documenting it for information governance review.
Corieva is designed so that processing of children's and families' data follows UK GDPR and the Data Protection Act 2018, with lawful basis and retention schedules agreed with each council.
Case note structures and safeguarding workflows are designed around the statutory guidance in Working Together to Safeguard Children 2023.
This website runs in Amazon Web Services' London region, and we are building the platform to keep data in the UK. AWS's UK data centres are ISO 27001 certified; Corieva itself is not yet certified.
We are registering with the Information Commissioner's Office and will publish our registration number here once it is confirmed.
We are preparing a Data Protection Impact Assessment and will share it with council information governance teams as part of any deployment.
We are working towards Cyber Essentials Plus and will publish our certificate here once it is awarded.
Talk to us about the documentation your information governance review needs. We'll share what is ready and what is in progress.
Talk to our team