Trust
Anyone can say their staff are verified. What matters is whether the system refuses to send someone whose verification has lapsed — ours does, and it does it without a human deciding to care that day.
Tier one
A police verification certificate on file before a caregiver is assigned to any household. It carries an expiry date, and an expired check blocks assignment automatically — the roster refuses to schedule someone whose clearance has lapsed rather than relying on anyone to notice.
Tier two
Government photo identity and a physically verified current address. Both are re-verified on a fixed cycle, not once at joining.
Tier three
A medical fitness screening appropriate to the work, including for people entering a home with an immunocompromised resident. This is the check that lapses soonest and is watched most closely.
At the door
Every caregiver carries a QR badge. Scanning it shows you their photograph, their name, their employee number and the current state of all four checks — before you let them in.
Health data is reachable only for a purpose someone has consented to under the Digital Personal Data Protection Act 2023 — not by whoever happens to be paying the bill. A relative abroad sees what the primary member has granted them and nothing else.
Reads and writes go to a hash-chained audit log — each entry sealed against the one before it, so a record cannot be altered or removed after the fact without the chain failing verification. You can request the log for your household.
Coordinators, caregivers and nurses all clear the same three tiers before they are assigned to anyone, and stay cleared or stop being assigned — a lapsed check takes someone off the roster the same day.
Everyone carries a photo badge with a QR code. Scanning it opens a page that shows their name, their employee number, and whether all four checks are currently in date. It needs no account and no app — anyone standing at the door can use it, and it answers about today rather than about the day they were hired.
Every visit is written down as it happens — the checklist as each item is completed, vitals as they are taken, medication given or refused, and a photograph at the end. It reaches your timeline within two hours, whatever timezone you are reading from.
This is an actual completion photograph, unretouched. It is meant to look like what it is: a phone snapshot taken by someone at the end of their shift.
Consent can be withdrawn from inside the app at any time, and withdrawal takes effect immediately rather than at the end of a billing period. Two purposes survive a withdrawal, and only two: an emergency response and access to a health record during one, because a person having a cardiac event cannot be asked to re-consent first. Marketing is not one of them, and never becomes one.
If something has gone wrong, or you want the audit log for your household, tell us.
