Governance operating layer

Governance for care providers

Risk register, action plans, assurance packs, reviews, and oversight — in one connected operating layer. Built to evidence CQC Regulation 17.

Book a governance demonstrationSee pricingWatch the walkthrough

Spreadsheets do not govern. They record.

The tools most care providers use for governance were never built for it.

No enforcement connection

Risk registers in Excel have no link to compliance posture. A high-risk entry does not change what happens on the rota or in the dashboard.

No audit trail

Action plans managed in email threads have no immutable record. Who changed what, and when, is not traceable in a way CQC will accept.

No CQC linkage

Assurance evidence scattered across folders and drives is assembled under pressure after an inspection notification — not structured in advance.

How the governance layer works

From risk identification to governance review evidence — four connected steps that produce a traceable CQC Regulation 17 record.

1

Risk identified and rated

A compliance risk is entered with a likelihood × impact rating and assigned to a named owner. Entering an open or escalated risk immediately updates the compliance posture score.

CQC Regulation 17 — risk management evidence
2

Action assigned with deadline

Actions are created from the risk and assigned to a named owner with a due date. Every state transition — open, in progress, awaiting closure, closed — is timestamped and immutable.

CQC Regulation 17 — traceable response to every identified risk
3

Evidence structured in an assurance pack

Risk entries, action plans, and governance records are assembled into a pre-structured assurance pack. Sign-off freezes the evidence at a point in time.

CQC Regulation 17 — inspection evidence available before CQC asks
4

Governance review scheduled and evidenced

Regular governance reviews are scheduled, conducted, and signed off within the platform. The attendance record, decisions, and follow-up actions are retained in full.

CQC Regulation 17 — scheduled governance activity evidenced

Six governance capabilities

Each capability is connected to the others. Risk register entries link to action plans. Action plans link to assurance packs. Packs reference governance reviews.

Risk Register

Track open, escalated, mitigated, and closed risks with a full Kanban workflow and audit trail.

Action Plans

Create, assign, and close actions with deadline tracking and immutable audit evidence.

Assurance Packs

Structure evidence in packaged form for CQC inspection readiness — ready before you are asked.

Governance Reviews

Schedule and evidence regular governance review cycles with SLA tracking.

Control Effectiveness

Score active controls against identified risks. Evidence that your governance layer is working.

Entity Benchmarking

Compare governance health across multiple service locations in a single view.

Connected to enforcement

Governance records are not siloed. Each module feeds the shared compliance layer.

Risk RegisterCompliance Posture

Risks feed into live compliance scoring. Open and escalated risks change your inspection readiness state.

Action PlansAudit Trail

Every action state change — open, in progress, closed, reopened — is traceable evidence for CQC.

Assurance PacksInspection Readiness

Pre-packaged by theme or standard. When CQC requests evidence, the pack is already structured.

Regulatory context

CQC Regulation 17 — Good Governance

Regulation 17 requires that registered persons maintain effective oversight, identify risks, take action to improve, and produce evidence that quality and safety are being managed effectively.

The governance operating layer in Statixs is built specifically to produce the evidence Regulation 17 expects — risk register entries, action plan trails, assurance packs, and governance review records — in a format that can be presented to CQC without assembly under pressure.

Connected to every other module

Governance does not operate in isolation. It is connected to the compliance, staffing, and workforce layers.

Compliance IntelligenceStaffing GovernanceWorkforce VerificationTraining and Credentials

Hours → Minutes

Time to assemble CQC inspection evidence when using assurance packs

Real-time

Compliance posture and governance health scoring — updated as records change, not on a schedule

Reg 17

Every governance module — risk register, action plans, assurance packs, reviews — maps directly to CQC Regulation 17

Governance questions

What care providers ask about the governance operating layer.

Yes. Open and escalated risks feed directly into your compliance posture score. A risk with no mitigation plan in place will affect your inspection readiness state — which is visible on the dashboard in real time.
Yes. Each action plan has a named owner, a due date, and a status. Managers receive notifications when actions are assigned to them, when deadlines approach, and when actions are awaiting closure approval.
Assurance packs can be organised by CQC theme or regulation. Evidence from compliance records, incidents, governance reviews, and action plans is attached to the relevant pack sections. When an inspector requests evidence for Regulation 17, the pack is already assembled.
Yes. Entity benchmarking shows governance health metrics per location — open action counts, overdue percentages, review completion rates, incident frequency, and risk register status — in a single comparative table.
Yes. All features are included from the standard per-user price. There is no separate governance module fee and no feature gating.

See governance in your environment

Book a demonstration tailored to your governance requirements — your risk register, your assurance structure, your CQC context.

Book a demonstrationSee pricing