Integrate

The preparation call will be held with your dedicated project manager to prepare you for the integration process and the product demonstration call. Your project manager will cover:

1. Checklist information
2. Your project milestone dates
3. The integration process
4. Show your user journeys either as a live demo or a video
5. Agenda for the product demonstration call

At the end of the call, your project manager and you will agree if you are ready for the product demonstration call.

If you are not ready, your project manager will document the outstanding actions. You may need a second preparation call.

The product demonstration call is a deep dive into your product and how it will meet our integration requirements 

The meeting, which takes place on a Teams call, is chaired by your project manager. We'll also invite NHS login SMEs from technical architecture, data security, information governance and legal. 

You should bring along the equivalent people from your organisation, including your product commissioner or sponsor.

The call is intended as a collaborative discussion and not a pass/fail exam.

The agenda is as follows: 

1. Welcome and introductions​
2. Your demonstration of your product, including a walkthrough of your technical architecture and data flow diagrams
3. Security requirements​
4. Artificial intelligence
5. Clinical safety requirements
6. Environments, scopes and additional features
7. Vector of trust values
8. Commercial requirements​
9. Change management​
10. Onboarding process timeline
11. Other sources of Information​
12. Next steps

By the end of the call we should have agreed:

1. Your product Vector of Trust
2. Your product Scopes and Claims
3. Your Connection Agreement including the need for us to draft any special terms and your signatory
4. An estimated go live date
    

Microsoft Teams

We'll set up a dedicated private channel on MS Teams and host shared documents here. 

Please ensure that you have the notifications function turned on so you know when a message or task has been posted in Teams. 

Let us know colleagues to add to the channel.

Following your Product Demonstration Call, you will start the integration process. This process includes:

1. Technical Integration of your Product
2. Assurance of your Product

We would like you to start the integration process by agreeing a go live date to work towards. We recognise that with agile development, dates may have to change. 

We know that partners on average take 4 months from the Product Demonstration Calls to go live - and you can use this nominal date as a guide. You can of course suggest a date earlier than this!

You must ensure you can commit to your proposed go live date, as missing any milestones will directly impact this date. You cannot go live on a Bank Holiday in England.

Developers can find the technical information in the NHS login developer documentation website.

When you are ready to integrate your product you will need to register an account in the integration test environment. You must provide evidence in your SCAL from this environment - not the sandpit environment.

Complete and submit an Integration Environment Request Form.

We will send you a test data pack and your access credentials. Access to the integration test environment can only be provided after your Product Demonstration Call.

We have provided testing scenarios. You will also need to complete the tests described in your SCAL.

When you have completed testing in the integration test environment, you need to get your technical conformance report. Complete and submit the NHS login Technical Conformance Report form. We will send you the report via email. You need to add this to your SCAL.

Complete the Supplier Conformance Assessment List (SCAL)

We will ask you to complete a Supplier Conformance Assessment List (SCAL), which will confirm that you have completed the necessary integration requirements for NHS login. 

Within your SCAL you must show that you can evidence several areas.

These include:

• completed and published an in-year DSPT at a minimum level of standards met.
• completed and, where applicable, remediated a pen test
• an NHS login compliant privacy notice

You will also be asked to provide an architecture diagram, a data flow diagram and user journeys.

See an example SCAL. You should not complete this, you will be sent a bespoke version for you to complete when we have agreed your technical and commercial position at the Product Demonstration Call.

Provide clinical safety requirements

You'll also need to show your product complies with clinical safety requirements by providing your:

1. Clinical Safety Officer details
2. Clinical Safety Case report
3. Hazard log
4. Compliance with DCB0129
5. Compliance with DCB0160
6. Medical device assessment and classification

The connection agreement is a legal contract between NHS England and suppliers. It details the terms and conditions of connecting your product or service with NHS England and what your responsibilities are. It also contains a pre-populated set of appendices which define the GDPR relationship the connecting party has with NHS England and its end users.

A connection agreement must be signed and received back at NHS England before your product can go live.

We will agree who signs the connection agreement. For example it might be you as the owner of the product or your commissioner (the organisation or person that has arranged and has paid to use your product)  if they are to own their instance of your product after it goes live with NHS login.

You must inform us if there are any changes that may affect your connection agreement - such as a company name change or takeover.

Read more in the Forms and documents library.

You will be sent a bespoke version for you to complete when we have agreed your technical and commercial position at the product demonstration call.

NHS login is supported by the NHS England Service Bridge. You must complete and submit a National Service Desk registration form to use this service for NHS login. If you are already registered with the Service Bridge, you will still need to complete a National Service Desk registration form.

Find out about NHS login's service, problem and incident management processes on the partner service management page. This includes information on our service level agreement and Higher Severity Service Incident (HSSI) management.

If you are an IM1 live supplier you will need to raise a Request for Change (RFC) via the IM1 team to notify your connected GP IT Suppliers that you are connecting to NHS login.

To raise an RFC,  contact your delivery lead in the IM1 team at [email protected]

When you have completed the documents, we will start a formal review cycle that will normally take 3 weeks. During this time we may ask you questions. At the end of the review cycle we will start the process to enable your product to go live.