Pilot Clinic Legal & Compliance Onboarding (TEN-03)

Onboard your clinic to Curatio

Every clinic workspace is isolated by tenant key and Postgres RLS. Before an operator provisions your tenant, we verify your UK ICO registration, DPO contact, and Article 28 Data Processing Agreement execution.

Step 1

Legal & DPA Sign-off

Confirm Data Controller status, ICO registration, DPO contact, and accept the Article 28 DPA.

Step 2

Operator Verification

Our operator console verifies your legal prerequisites before provisioning your isolated UK tenant.

Step 3

Go-Live & Passkeys

Your Clinic Administrator receives an invite, enrols WebAuthn passkeys, and completes Stripe & branding setup.

1. Clinic & Workspace Details

Clinic legal name

Primary contact name

Work email

Plan

Sites

Staff seats

2. UK Regulatory & Data Governance (TEN-03 / CMP-04)

UK ICO registration number

Format: e.g. ZA123456 or Z1234567

CQC Provider ID (if applicable)

Optional for non-CQC wellness clinics

DPO / Caldicott Guardian name

DPO / Caldicott Guardian email

Authorised legal signatory

Signatory role / title

Migration or security notes (optional)

3. Mandatory Legal & UK GDPR Acknowledgements

I confirm the Clinic is the Data Controller under UK GDPR and appoints Curatio Ltd solely as Data Processor.On behalf of the Clinic, I accept the UK GDPR Article 28 Data Processing Agreement (2026-11-v1).I acknowledge the Clinic DPIA obligations and confirm no clinical notes will be stored in Curatio (CLN-03).I accept the Pilot & SaaS Terms of Service (2026-11-v1) and Privacy Notice.

Back to overview Article 28 DPA Privacy Notice Terms of Service