I have deployed VoIP for 12 NHS trusts and 30+ private healthcare organisations across the UK. Healthcare telephony has requirements that no generic VoIP buyer's guide covers.
Here are the 7 questions that separate compliant deployments from liability nightmares.
Question 1: "Does Your System Meet NHS Digital's Clinical Safety Standards?"
NHS trusts must comply with DCB 0129 (Clinical Risk Management) for any system that could impact patient safety. A phone system qualifies because:
- Missed calls to clinical teams delay patient care
- Incorrect call routing can send urgent calls to the wrong department
- System downtime means no incoming calls to A&E, wards, or clinics
| Requirement | What It Means for VoIP |
|---|---|
| Hazard identification | Document what happens if the phone system fails |
| Risk mitigation | Redundancy, failover, backup communication plan |
| Safety case | Written assessment of clinical impact |
Most VoIP providers have never heard of DCB 0129. Ask explicitly. If they look blank, they have not deployed in NHS.
Question 2: "Where Are Call Recordings Physically Stored?"
NHS trusts process patient data on calls daily. Under UK GDPR and the Data Protection Act 2018:
| Requirement | Implication |
|---|---|
| Data must be stored in UK or adequacy countries | No US-only cloud storage |
| Subject Access Requests (SARs) | Must be able to find and export specific call recordings within 30 days |
| Right to erasure | Must be able to delete specific recordings on request |
| Data retention policy | Cannot keep recordings indefinitely — must have defined retention period |
Ask: "Can you guarantee UK data residency for all call recordings? Can you export a specific recording within 24 hours for a SAR?"
Question 3: "How Do You Handle 999 Calls from IP Phones?"
NHS sites have unique 999 requirements:
- Multiple buildings on one campus with different addresses
- Wards on different floors — dispatchers need floor-level location
- Staff moving between sites with softphones
| Scenario | Risk | Solution |
|---|---|---|
| IP phone in Building A, registered to Building B | Ambulance goes to wrong building | E911 per-device registration |
| Doctor uses softphone from home | 999 sends ambulance to hospital, not home | Nomadic E911 with location update |
| Portable phone moved between wards | Dispatcher does not know which ward | WiFi-based location detection |
Question 4: "Can You Integrate with Our PAS/EPR System?"
Patient Administration Systems (PAS) and Electronic Patient Records (EPR) contain the clinical context that makes phone calls useful.
| Integration | What It Does | Impact |
|---|---|---|
| Screen pop from PAS | When patient calls, their record appears automatically | Saves 60-90 seconds per call |
| Click-to-call from EPR | Clinician clicks patient's phone number in EPR to call | Eliminates manual dialling errors |
| Auto-logging | Call recorded against patient record automatically | Complete communication audit trail |
The honest truth: Most VoIP providers support Salesforce and HubSpot integration. Very few support NHS PAS systems (Lorenzo, Cerner, SystmOne). Ask for specific NHS integration references.
Question 5: "What Is Your Actual Uptime — Not Your SLA?"
For an NHS trust, 8 hours of phone downtime is not an SLA credit calculation. It is a clinical incident.
| Uptime | Annual Downtime | Acceptable for NHS? |
|---|---|---|
| 99.9% | 8.76 hours | NO |
| 99.99% | 52 minutes | Marginal |
| 99.999% | 5 minutes | Yes |
Ask for measured uptime over 24 months, not the SLA target. And ask what happens during planned maintenance — NHS operates 24/7.
Question 6: "Do You Support HSCN Connectivity?"
The Health and Social Care Network (HSCN) is the NHS's private network. Some trusts route VoIP traffic over HSCN for security. Your provider needs to either:
- Connect directly to HSCN (preferred)
- Work over the trust's internet breakout with appropriate encryption
Question 7: "Can You Provide References from NHS Trusts of Similar Size?"
Not case studies. Not testimonials. Actual NHS IT directors you can call and ask:
- What went wrong during deployment?
- How long did the migration take?
- How responsive is support for critical issues?
- Would you choose them again?
If a provider cannot produce 2-3 NHS references, they have not done enough NHS deployments to handle yours safely.
DialPhone has deployed across 12 NHS trusts with UK data residency, DCB 0129 safety case support, and HSCN connectivity options. They provide NHS-specific references on request.
Top comments (0)