Everything your vendor onboarding will ask us, answered up front
Certifications, information security, insurance and onboarding, written for the people who run supplier due diligence.
Certified to
- ISO 9001
- ISO 27001
- Cyber Essentials
- FSQS Registered
- VRA member
- Disability Confident Committed
- Metriks partner
Certifications and memberships
ISO 9001
An independently certified quality management system covering how our work is planned, delivered and checked.
Why it matters to you
You are not relying on our own description of our processes. An external certification body audits how we run assessments, rehabilitation and reporting, and we have to keep passing.
ISO 27001
ISO/IEC 27001
An independently certified information security management system covering how we protect the data we hold.
Why it matters to you
Your referrals contain medical and personal information. Certification means our security controls, access rules and incident processes are audited externally, not just written down.
Cyber Essentials
A UK government-backed certification of baseline cyber security controls.
Why it matters to you
It confirms the technical basics are in place and maintained: boundary firewalls, secure configuration, access control, malware protection and patching.
FSQS Registered
FSQS
Registered on the supplier qualification system used by UK banks, insurers and other financial services organisations.
Why it matters to you
If your organisation uses FSQS, much of our due diligence is already on file, which shortens onboarding.
VRA member
Vocational Rehabilitation Association
A member of the UK professional association for vocational rehabilitation.
Why it matters to you
Our consultants work within the VRA's standards of practice for vocational rehabilitation.
Disability Confident Committed
Disability Confident (Committed)
Signed up to the UK government scheme for employing and supporting disabled people.
Why it matters to you
It signals that the organisation assessing and supporting your people applies the same standards to its own workplace.
Metriks partner
Metriks training partnership
Training partner of Metriks for functional capacity evaluation certification. Form Health has been running FCE training since 1999.
Why it matters to you
The clinicians assessing your cases also train other clinicians to deliver the same standardised evaluations.
Supplier information
Information security and UK GDPR
Personal and medical information is handled under UK GDPR within an information security management system certified to ISO/IEC 27001. Access is role-based and data is retained only as long as the engagement requires.
For data protection queries, contact privacy@formhealth.com.
Insurance cover
Professional indemnity and public liability insurance are in place.
Onboarding as a supplier
We support structured vendor onboarding, typically completed within three to four weeks, including questionnaires, evidence packs and platform registration.
Request our supplier pack
Certificates and insurance details, sent straight back to you.
Procurement questions
Are you ISO 27001 certified?
Yes. Our information security management system is certified to ISO/IEC 27001, alongside ISO 9001 for quality management and Cyber Essentials.
Are you registered on FSQS?
Yes. We are registered on FSQS, the supplier qualification system used by UK banks, insurers and other financial services organisations.
What insurance cover do you hold?
Professional indemnity and public liability cover are in place. Certificates and cover values are available in our supplier pack.
How long does supplier onboarding take?
A structured onboarding is typically completed within three to four weeks, depending on your process.
How is claimant and employee data protected?
Personal and medical information is handled under UK GDPR within our ISO/IEC 27001-certified information security management system.
Talk to us about onboarding
Send us your due-diligence questionnaire and we will turn it around quickly.