Evidence and Review Status
DriverWell is documenting what is implemented, what is paused and what still needs competent or independent review. A source link is not treated as proof of every nearby claim.
Assessment status
ORCHA Assured Bronze, UK | EU
DriverWell is ORCHA Assured Bronze. The supplied assessment status identifies the OBR v6 baseline-review domains as Data & Privacy, Professional Assurance, and Usability & Accessibility.
This status should be read within that assessment scope. It does not mean that DriverWell provides emergency or clinical care, is a medical device, has NHS approval, or has independent certification for every current or future feature.
Learn about the ORCHA Assured tiersImplemented controls
These controls are supported by current source code and regression tests, but still form part of a wider assessment.
Mood, fatigue, RoadMate and private nutrition health-data writes require a recorded health-data processing choice.
RoadMate administrator safeguarding alerts require the separate crisis-detection choice. On-screen emergency signposting remains available without creating an alert.
Individual wellbeing entries are not available in the employer dashboard.
Fleet engagement counts use a minimum cohort of 10. Mood, fatigue and health reporting requires at least 20 and remains disabled until separate consent and cohort-linkage approval.
Unreviewed medical fitness, DVLA decision-tree, diabetes-risk, fatigue-score, sleep-score and personalised nutrition outputs are paused or retired.
Security reports receive a reference, restricted administrator review, immutable status events and data-minimised owner notification.
Open approval and evidence work
These are release gates, not completed assurances. DriverWell will not name an unnamed reviewer or describe draft governance records as formally approved.
- Peter McKenna must review and approve the draft DPIAs, ROPA, retention schedule, intended-use record and governance plans as controller.
- Named competent clinical, medical-device, safeguarding, occupational-health and content reviewers have not yet been appointed.
- Independent accessibility and security assessments have not yet been completed.
- Supplier contracts, subprocessors, international transfer safeguards, residency, backup treatment and security evidence still require documentary verification.
- Historical health records and historic consent evidence require a controlled review before the current consent audit can be treated as complete evidence.
Official source families
Each retained health, safety, privacy or regulatory claim still needs an exact supporting passage, source date, owner and review decision. General homepages are not sufficient evidence for a statistic.
MHRA software and app guidance
Intended purpose and medical-device qualification for software and digital mental health technology.
DVLA health and driving guidance
Current condition-specific medical standards and the official route for individual notification questions.
ICO accountability and governance guidance
DPIAs, processing records, retention, processor contracts, international transfers and personal-data breach duties.
NHS health information
General public health information and routes to qualified care.
HSE work-related stress and fatigue guidance
Official employer and worker information on work design, stress and fatigue risk management.
NICE guidance
Clinical recommendations used only when the exact publication supports the precise retained statement.
How content is controlled
Material claims are entered into a controlled register with a risk tier, exact source, owner, reviewer requirement, review date and release decision. Critical features remain unavailable when evidence or competent review is incomplete. Users can report a content concern through the contact route or a security issue through the protected incident workflow.