Stage 4: Legals and Production Access for NIR.

The final verification check prior to completing the onboarding process.

Help and tips for completing this section

Treat This as the Point of No Return: Double-check all your previous DOS entries before submitting this section. Any changes to your declared use case, supplier or organisation names etc., will require a formal change request via Service Now.

Ready Your Legal Signatory (Suppliers): The Connection Agreement is a legally binding contract and must be signed by someone with the documented authority to bind your organisation (e.g., a Board Director, Legal Counsel, or Chief Executive). Ensure they are briefed, available, and expecting the document so it doesn't get stuck in an inbox.

Confirm Local "Go/No-Go" Readiness (Healthcare Organisations): Reaching this stage means you are confirming your Trust is ready to go live. Ensure your local project board, Clinical Safety Officer, and IT service desk have all formally agreed to the deployment and that your local Business Continuity Plans are in place.

Q.1

Are you onboarding as a Data Processor (Supplier) or a Data Controller (End User Organisation)?

Supporting information

Your selection determines the information required during digital onboarding. It directly reflects your clinical safety obligations, legal responsibilities for the NHSE integration, and the specific technical assurance steps you must complete.

Data Processor (Supplier): Typically a software vendor or IT provider. You process data strictly on behalf of the Data Controller. You sign the Connection Agreement with NHSE and assure your product and version are compliant with NHS standards. Your onboarding focuses on technical conformance, security, and product-level clinical safety (DCB0129).

Data Controller (End User Organisation): Typically a Trust, Healthcare Organisation, Imaging Network, or other entity that generates diagnostic data and makes clinical decisions on behalf of patients. You determine the purpose of the data, hold the direct relationship with the patient, and are responsible for local IG approvals (e.g., DPIA, signing the Data Sharing Arrangement). You are also responsible for organisation-level clinical safety (DCB0160).

Data Processor

Data Controller

Q.2

Confirm you understand that you will not be taken to INT Environment testing until an End User Organisation (EUO) has completed their governance assurance and provided their HCID. Therefore, signing the Connection Agreement does not lead to automatic production access.

Supporting information

To ensure safe and accurate data routing, the NIR does not grant blanket live access to a supplier's system. Because every Data Controller (Trust or Healthcare Organisation) operates under unique configurations, connections must be validated locally.

Even if your product is already live with other customers, you must conduct and pass Integration Testing using the specific HCID of each new deploying organisation. This proves that cross-network queries and data flows are routing correctly for that specific local setup before production credentials are provided and clinical use begins.

Yes

Q.3

Please confirm that your Trust has completed its formal Go/No-Go meeting and is ready to approve the integration for live deployment.

I can confirm that:

Following completion of our local go/no-go live meeting with our internal stakeholders and suppliers, I confirm we are satisfied that all required activities have been completed and that our organisation is ready to proceed into the NIR live production environment.

Our Go/No-Go group confirms:
Local assurance activities have been completed
Relevant technical and operational testing has been successfully concluded
Appropriate stakeholder and supplier approvals have been obtained
Any identified risks or issues have been reviewed and accepted by the organisation
Support arrangements are in place for go-live and early life support

I therefore request approval to proceed with transition to the live production environment.

Supporting information

Upload the completed Go/No-Go confirmation form once your organisation has completed its local go-live review with internal stakeholders and suppliers. The form confirms that your organisation is ready to move into the NIR live production environment and lets the NIR Team know the proposed switchover date to ensure smooth transition into the live environment.

You can access the template from the NIR Onboarding webpage

Yes

Q.3.1

Provide Go/No-Go meeting date

For example, 16 08 2026

Day

Month

Year

Q.3.2

Upload your completed and signed NIR Go/No-Go form, indicating:

Lead organisation's name
Proposed live switchover date
Primary contact name and role
Supplier(s) included in Go/No-Go Decision

Upload a file You can upload one file that is smaller than 250MB. If you need to provide multiple files you should zip them up and upload them as a single .zip file.

Back to NIR API