Diligram — The last 100 metres of governance

What it does

Not another layer. One more pillar — and a deep one.

Every governance suite has a documents module. None of them was built for the last hundred metres — getting the approved version to the person on shift and proving it landed. That is the only thing we build, which is why we go deeper into it than any module beside it, and why Tier 1 organisations have chosen it over the incumbents already installed alongside.

AuthorDraft and review

ApproveNamed, dated release

DistributeRole, site, device

AcknowledgePer person, per version

EvidenceAudit trail on demand

RetireWithdrawn everywhere

Author

Create, review, approve

A guided workflow from drafting to release, with named approvers and a dated approval record. Or keep authoring where you do today and publish approved versions across.

Control

Release and version control

One current version, everywhere. Nothing in circulation that has not been approved, and no argument about which copy is real.

Retire

Superseded versions come out of circulation

Withdrawal is central and automatic, including the QR code on the equipment. A device that has been offline carries a visible version number and last-synchronised date, and expires, so nobody is unknowingly holding a superseded copy.

Renew

Lifecycle and expiry alerts

Owners are alerted six months before a review date and complete the review in-product, with escalation when it slips. Documents do not quietly fall out of date.

Distribute

Targeted, multi-channel, offline

By role, department, site or staff group — mobile, desktop, QR code at the point of use, and available offline when there is no connection to be had.

Find

Smart search in seconds

Thirty seconds to the right policy, down from ten minutes hunting a shared drive. That single change is where most of the measured saving comes from.

Evidence

Mandatory reads and attestation

Read receipts and per-person attestation against the version in force, with automated reminders and escalation paths until the acknowledgement is in.

Assure

Competence, not just receipt

Training, quizzes and certificates on top of the document, so you can show not only that people received the change but that they understood it.

Report

Dashboards and audit evidence

Real-time compliance rates by department and document, and an audit trail you can produce for an inspector on the day they ask, not the month after.

Nothing is migrated and nothing is re-platformed. MyStaff connects through standard single sign-on and APIs to the systems you already run, and content may be routed through it where that is useful — it does not have to be. It can also replace a legacy document system outright, where customers have chosen to. Which of the two you want is settled before contract, not after.

MyStaff as a frontline governance pillar standing beside GRC, quality and document management, HR and identity, learning management, and intranet systems, each unchanged — One discipline, taken deeper than any comparable module — standing beside the systems you already run, all of which stay exactly as they are.

Beyond the policy library

Same engine, well past compliance.

Once governed content is on every phone, a lot of paper stops making sense.

Patients

Leaflets, without the paper

Staff send the approved patient information leaflet straight from the app, by QR code or email. No printing, no cupboard of superseded versions, and nothing can be added to the text on the way out — the patient gets exactly the approved leaflet. Patient details never reach us.

Point of use

A code on the machine itself

Scan the QR on an infusion pump, a ward noticeboard or a plant room door and the documents attached to it come up — manual, SOP, policy, whichever applies. Departmental QR posters generate themselves, so nobody maintains them.

Everything else

Onboarding, learning, announcements

The same controlled library carries induction packs, training and staff communications, and works the same way in primary care, community and mental health services as it does in an acute hospital.

Why it works

Governance only counts if it reaches the frontline.

Compliance software is bought by people at desks and used by people who do not have one. That is why adoption usually fails, and it is the specific problem MyStaff was built to solve. Our product people came from consumer digital, streaming and e-learning rather than from enterprise compliance — which is why a nurse, a porter or a bank clinician finds the current procedure in seconds, with no training and no help desk.

Governance dashboard showing compliance by red, amber and green, document views over time, and a critical actions list with overdue items by site and department — What the governance lead sees — compliance by department, what is overdue and by how long, ready for an inspector on the day they ask.

The MyStaff app on a phone, showing search and the staff member's own guidelines, protocols and policies — What the nurse sees — the same governed library, on the device already in their hand.

Reach

The people who never log in

Bank, agency, locum and night-shift staff, and clinicians with practising privileges who are not on your payroll — invited, licensed and evidenced like anyone else.

At the point of care

In their hands, where the question is

Those retrievals happen on the ward, at the bedside, on a home visit — in the minute the decision is being made, not back at a desk afterwards. The approved document reflows to the screen, with type and background adjustable for the reader.

Languages

Everyone reads it in their own

Interface and documents in the language of the person opening them, wherever an organisation spans more than one language region.

Scale

Migration is not the slow part

Bulk ingest puts a two-thousand-document library in front of staff in a single day. Deciding what to retire and who owns what takes longer — and we work through that with you.

AI that helps people find the approved document.

The approved document is the record, and it is what staff open. The AI works around it, not inside it.

On arrival

Every document indexed as it lands

As a document enters the system, its key information is extracted automatically — no one has to tag a library of two thousand policies by hand.

Finding

Search that matches the situation

Generated tags and related-document links surface the right procedure and everything that sits next to it, instead of relying on someone guessing the document title.

Orientation

A summary to get your bearings

A generated summary sits alongside the document as a way in. The approved text is what you open, and it is what counts.

Evidence

Talk to someone doing your job.

Developed with NHS organisations since 2021, and measured where it matters: millions of governed document interactions across NHS and Tier‑1 healthcare organisations every year, measured compliance improvements, direct cash-releasing savings, substantial workforce capacity released, and a return on investment demonstrated several times over in customer evaluations.

Customer story

Mid and South Essex NHS Foundation Trust

One of the largest trusts in England. Five minutes, in their own words — why they brought MyStaff in, what changed on the wards, and what their governance team would tell a colleague considering it.

Reference calls with live NHS customers are available on request. We introduce you to a governance lead rather than an account manager, and we leave the call. Outcome studies and the evaluation method behind them are shared under NDA with the customer’s agreement — we do not publish our customers’ internal analysis, and we would not publish yours.

Recognition

WinnerHealth Tech Digital 2023
FinalistHSJ Partnership 2025
ShortlistHealth Tech World 2023
FinalistNursing Times Workforce 2024
hett 2022Unexpected Innovation

Developed with NHS trusts since 2021, across acute, community and mental health services, and in UK private healthcare and retirement living — including workforces where much of the clinical staff hold practising privileges rather than a contract of employment.

Where it applies

Proven in healthcare. Built for every regulated sector.

Healthcare is where this discipline is hardest — the most documents, the most turnover, the least desk time, and a regulator who can arrive unannounced. Meeting that standard is the point of the evidence above. The structure underneath it is universal: a controlled document, an approval, a version in force, a person who must act on it, and someone entitled to ask who knew what.

Health and care

Which version was in force?

Which protocol applied on the day, and who had acknowledged it. Live today across NHS acute, community and mental health services, private hospital groups and retirement living.

Financial services

Who had read the update?

Whether the desk was working to the current policy before the transaction, and whether that can be evidenced to a regulator rather than asserted.

Manufacturing

Which instruction was live?

Which work instruction governed that line on that shift, who was working to it, and what happened to the superseded version.

Energy and transport

Did the crew have it?

Whether the people on site held the current safety procedure, provable after an incident rather than reconstructed during the inquiry.

Our live deployments today are in health, care and retirement living. The engine is the same one in any regulated sector, and in a first conversation we will walk you through how it maps onto yours.

Security and data protection

Most of this decision is made by people who never see a demo.

This section is for them. Nothing here needs a sales call, and the documents behind it go out before you commit to anything.

NHS assuranceDSP Toolkit — Standards Exceeded, 2022/23 to 2024/25
CertificationCyber Essentials Plus — certified Nov 2025, valid to Nov 2026
Security controlsISO 27001‑aligned
HostingAWS; London (eu-west-2) for UK, in-region elsewhere
EncryptionTLS in transit; AES-256 at rest
TestingIndependent penetration testing, most recent October 2025
ICO registrationZA817651
Patient dataNot designed to hold it; none is required
Staff data heldName, work email, department and site
Data controllerYou. We process on your instructions
AccessSingle sign-on; content filtered to the individual
Multi-factor authenticationEnforced on administrative access
RecoveryDaily backups, restore within 24 hours; DR plan in place
Vulnerability disclosuresecurity.txt published; externally monitored
Assessments completedDPIAs and customer security assessments
Sub-processorsFull list in the assurance pack

MyStaff needs no patient data to do its job and asks for none; customers remain responsible for the content they choose to upload.

Our information security policy, data protection impact assessment, sub-processor list, current certification status and a signed data processing agreement are available to prospective customers on request. Ask for the assurance pack at info@diligram.com and we will send it without a qualification call first.

Buying it

How this actually gets bought.

The commercial model in plain terms, so your finance team can plan against one number for the life of the contract.

Route

Standard NHS terms, contracted directly

Our NHS customers contract on standard NHS terms and conditions for the provision of services. Your category team is welcome to the procurement note our existing customers worked from, so the route can be settled early. Private and international customers contract directly.

Timeline

12 to 14 weeks, contract to go-live

Technical readiness within one to two weeks of single sign-on access. Full go-live by week 12 to 14 — contract finalisation, configuration, integration, content onboarding, staff training and phased rollout — with a post-implementation review around week 16.

Model

One enterprise licence, one number

An enterprise licence covering every site and every member of staff — consultants, contractors and bank included, not only employees. Sized to your organisation, never metered per user, so the bill does not move when your headcount does.

Budget certainty

Equal annual payments, fixed for the term

The same figure every year across a three or five year agreement, with a longer term priced lower. Extend, and you extend at the same guaranteed price — there is no step-up waiting at renewal.

Room to grow

Grow without being repriced

The licence carries headroom to grow before anything is revisited. A merger or a major change in scope is agreed openly, not applied to your invoice.

No surprises

Turnkey, so the fee is the cost

One implementation fee, agreed upfront. The product is turnkey and needs no bespoke development; if you ever want something beyond scope it is quoted and signed off before any work starts.

Support runs in business hours, with infrastructure monitored around the clock and an out-of-hours emergency route. Training and onboarding are included. Your content stays yours, and it comes back in an open format if you ever leave.

Beyond the UK

Engineered for international rollout.

Not adapted for export after the fact. Multi-language operation, offline access and in-region hosting are in the product because the organisations it was built for span languages, jurisdictions and levels of connectivity that cannot be taken for granted.

Jurisdiction

Hosted where you require it

Your data stays in the region that governs you, named in the contract rather than left to a support ticket. Nothing has to route through the United Kingdom.

Connectivity

Works where the connection does not

Offline access for staff on a ward, in the field, or in facilities where bandwidth is a planning assumption rather than something you can rely on.

Delivery

Deployable under your own brand

Healthcare IT providers and national programmes can run the platform white-label, as their own service, with Diligram behind it rather than in front of it.

Diligram Limited contracts everywhere, with subsidiaries in Rwanda and the Democratic Republic of the Congo.

Company

One thing, done properly.

Diligram Limited is a British software company, with subsidiaries in Rwanda and the Democratic Republic of the Congo. We do one thing: controlled documents that reach the frontline and prove it. We are not an EPR, a GRC suite or a learning platform — you already have those, and MyStaff is built to stand beside them.

The governance expertise came from working inside hospital quality teams since 2021, which teaches you more than a brochure does. The product instincts came from consumer digital, which is the reason people actually use it.

Who you contract with
Entity	Diligram Limited
Registration	England and Wales, company no. 12865051
Registered office	923 Finchley Road, London NW11 7PE, United Kingdom
VAT	GB 440 512 730
Governing law	England and Wales

One contracting entity, wherever you are. Where the data sits and which law governs are settled before contract, not after.

See how MyStaff solves the last 100 metres.

Publication is not assurance.