The standards we build against
Surveyors score at the measurable element, so a compliance model has to work at that level. Each entry below says what the standard asks for and what the platform records against it.
The platform reports evidence status and gaps. A person signs off compliance, and we never claim otherwise.
Accreditation and licensing
11-
JCI International
Joint Commission International
The accreditation standard most private hospitals in the Gulf are measured against. Surveyors score at the measurable element, which is the level a compliance system has...
-
JCI SQE International
JCI Staff Qualifications and Education
The chapter covering licence currency, primary source verification, scope of practice and competency. It asks for enforcement at the point of clinical action, not a repor...
-
JCI FMS International
JCI Facility Management and Safety
Utility systems, fire safety, emergency codes, medical waste and environmental rounds, each with a testing programme and a record that a surveyor can follow.
-
DHA Dubai, UAE
Dubai Health Authority
Licensing and clinical governance authority for Dubai. Facility licensing, professional licensing and the health information exchange obligations that come with operating...
-
DoH Abu Dhabi, UAE
Department of Health Abu Dhabi
Regulator for the emirate of Abu Dhabi. Sets facility and professional licensing, the JAWDA quality programme, and mandatory participation in the emirate health informati...
-
JAWDA Abu Dhabi, UAE
JAWDA quality programme
A defined set of healthcare quality indicators submitted to the regulator on a fixed cycle. Each indicator has a numerator and denominator definition, so the figures shou...
-
MOHAP UAE, federal
Ministry of Health and Prevention
Federal health authority covering the northern emirates and national health policy, including facility and professional licensing outside Dubai and Abu Dhabi.
-
CBAHI Saudi Arabia
Saudi Central Board for Accreditation of Healthcare Institutions
Mandatory national accreditation for healthcare facilities in Saudi Arabia, with its own standard hierarchy and survey process.
-
NABH India
National Accreditation Board for Hospitals and Healthcare Providers
The Indian hospital accreditation standard, structured around patient-centred and organisation-centred chapters.
-
GAHAR Egypt
General Authority for Healthcare Accreditation and Regulation
Egypt national healthcare accreditation and regulation body, and the standard against which facilities are surveyed.
-
PHSRC Jordan
Health Care Accreditation Council
Jordanian healthcare accreditation standards, widely referenced across the Levant.
ISO standards
6-
ISO 9001 International
ISO 9001 quality management systems
Quality management system requirements. In a facility already holding a clinical accreditation, the overlap is substantial, which is what makes proving a control once and...
-
ISO 15189 International
ISO 15189 medical laboratories
Competence and quality for medical laboratories. An assessor asks for the internal quality control record, the competency of the person who validated the result, and the...
-
ISO 27001 International
ISO 27001 information security management
Information security management system requirements. Relevant both as a facility control set and as a question every hospital CIO asks a software supplier.
-
ISO 45001 International
ISO 45001 occupational health and safety
Occupational health and safety management. Overlaps heavily with the environment of care and staff safety requirements in clinical accreditation.
-
ISO 55001 International
ISO 55001 asset management
Asset management systems. In a hospital this reaches biomedical equipment lifecycle, calibration, preventive maintenance and cost of ownership.
-
ISO 31000 International
ISO 31000 risk management
Risk management principles and guidelines, including the inherent and residual distinction and the appetite thresholds that decide when a risk has to escalate.
Clinical and safety methodology
7-
WHO ICPS International
WHO International Classification for Patient Safety
The taxonomy for classifying patient safety events. Classifying to a shared standard is what makes aggregate trending across departments and time mean anything.
-
NCC MERP International
NCC MERP medication error severity index
The severity scale for medication errors, from a circumstance with capacity to cause error through to a death. Severity tiering is also what prevents interaction alerting...
-
WHO surgical safety checklist International
WHO surgical safety checklist
Sign in, time out and sign out before, during and after an operation. Worth enforcing in the workflow rather than offering as an optional form.
-
RCA2 International
Root cause analysis and RCA2
Structured investigation of a serious event. RCA2 is the updated methodology, emphasising action strength and measurable improvement rather than a written narrative.
-
FMEA International
Failure mode and effects analysis
Proactive analysis of how a process could fail, before it does. The counterpart to root cause analysis, which only ever runs after the event.
-
Tracer methodology International
Tracer methodology
A surveyor follows one patient, or one system, through the organisation and asks for the evidence at each step. It is why evidence has to be linked to live records rather...
-
Three lines of defence International
Three lines of defence
The governance model separating operational ownership, oversight and independent assurance, so a control is not tested only by the people who run it.
Interoperability and terminology
12-
FHIR R4 International
HL7 FHIR R4
The resource-based interoperability standard the Gulf health information exchanges are built on. The valuable part of an implementation is not sending a message, it is th...
-
HL7 v2 International
HL7 version 2 messaging
The messaging standard still carrying most laboratory, radiology and admission traffic between hospital systems and devices.
-
DICOM International
DICOM imaging standard
The imaging standard covering modality worklists, study transfer and PACS integration, including the radiation dose recording that is a regulatory requirement across most...
-
SNOMED CT International
SNOMED CT
The clinical terminology used to code findings, procedures and problems so that a record means the same thing in two systems.
-
LOINC International
LOINC
The coding system for laboratory and clinical observations, and the reason a result can be trended across two laboratories.
-
ICD International
ICD-10 and ICD-11
Diagnosis classification. Which revision applies depends on the market and the payer, so both have to be supported at once rather than migrated between.
-
CPT International
CPT procedure coding
Procedure coding used for billing and claim adjudication, alongside regional code sets where a payer requires them.
-
NABIDH Dubai, UAE
NABIDH health information exchange
Dubai unified health record programme. Licensed facilities in the emirate submit encounter data to the exchange, and what matters operationally is per-encounter submissio...
-
Malaffi Abu Dhabi, UAE
Malaffi health information exchange
The Abu Dhabi health information exchange. Participation is a condition of licensing in the emirate, and consent has to be verified before any push.
-
Riayati UAE, federal
Riayati national health information platform
The UAE federal health information platform, linking the emirate-level exchanges into a national record.
-
DHPO UAE
DHPO and eClaimLink
The UAE claim submission rails. Eligibility, prior authorisation, submission and remittance run through them, and denial reasons only reduce rework if they reach the poin...
-
NPHIES Saudi Arabia
NPHIES national platform
The Saudi national platform for health insurance exchange, covering eligibility, pre-authorisation and claims on FHIR.
Privacy and data protection
7-
UAE PDPL UAE
UAE Personal Data Protection Law
The federal personal data protection regime, including lawful basis, data subject rights and the residency expectations that decide where a health system may be hosted.
-
Saudi PDPL Saudi Arabia
Saudi Personal Data Protection Law
The Saudi personal data protection regime, applied alongside NDMO data management controls.
-
NDMO Saudi Arabia
Saudi National Data Management Office controls
National data management and governance controls governing classification, residency and sharing of data held in the Kingdom.
-
GDPR European Union
General Data Protection Regulation
The European data protection regulation. Relevant to Gulf operators through group structures, European patients and procurement questionnaires that use it as the baseline...
-
HIPAA United States
HIPAA Security and Privacy Rules
The US framework for protected health information. Widely used across the Gulf as a control reference in procurement, covering access control, audit, integrity and transm...
-
India DPDP India
Digital Personal Data Protection Act
The Indian personal data protection statute, including consent and data fiduciary obligations.
-
Sri Lanka PDPA Sri Lanka
Sri Lanka Personal Data Protection Act
The Sri Lankan personal data protection statute, with controller obligations and data subject rights.
Labour and payroll statute
2-
WPS UAE
UAE Wage Protection System
Mandatory salary file submission, alongside end of service gratuity, leave entitlement, visa and labour card expiry, and Emiratisation reporting.
-
GOSI Saudi Arabia
GOSI, Mudad and Saudization
Social insurance contributions, wage protection through Mudad, Iqama expiry tracking and the Saudization bands a facility is measured against.
Bring us your standard set
Tell us which accreditations and licences you hold. We will show you where the evidence would come from.