Skip to main content

Governance operating layer

Governance for care providers

Governance is not a report. It is a control layer.

Risk register, action plans, assurance packs, reviews, and entity benchmarking, in one connected operating layer. Built to evidence CQC Regulation 17.

CQC Regulation 17 · Good governance

Regulation 17 requires that registered persons maintain effective oversight, identify risks, take action to improve, and produce evidence that quality and safety are being managed effectively.

It is one of the most commonly cited regulations in requirement notices. The gap is rarely one incident, it is the absence of a system.

Evidence as a by-product of operation.

Spreadsheet governance fails because it does not produce evidence automatically. In Statixs, evidence is written the moment governance work happens: risk identified, action raised, review completed, timestamped and attributed.

Read: what Reg 17 requires you to evidence

Spreadsheets do not govern. They record.

The tools most care providers use for governance were never built for it.

No enforcement connection

Risk registers in Excel have no link to compliance posture. A high-risk entry does not change what happens on the rota or in the dashboard.

No audit trail

Action plans managed in email threads have no immutable record. Who changed what, and when, is not traceable in a way CQC will accept.

No CQC linkage

Assurance evidence scattered across folders and drives is assembled under pressure after an inspection notification, not structured in advance.

The record

Append-only. Timestamped.

Every governance state change writes an entry: who acted, what changed, and when. Inspectors follow the trail from incident to investigation to action to review — Statixs keeps that chain intact.

Who acted, what changed, and when, on every risk, action, and review
The trail from incident to investigation to action to review stays intact
Exportable in standard formats for CQC submission
Inspection evidence

Hours of assembly, reduced to minutes.

Evidence from compliance records, incidents, governance reviews, and action plans is structured continuously, not assembled under pressure after an inspection notification.

continuous
Assembled as you work
Risk entries, actions, and reviews are captured where the work happens, not reconstructed afterwards.
by CQC theme
Structured by key question
Organised by CQC regulation and the five key questions, Safe, Effective, Caring, Responsive, Well-led.
minutes
Exported, dated, ready
A professional, timestamped pack, before the inspector arrives, not after the first lost day.

How the governance layer works

From risk identification to governance review evidence: four connected steps that produce a traceable CQC Regulation 17 record.

1

Risk identified and rated

A compliance risk is entered with a likelihood × impact rating and assigned to a named owner. Entering an open or escalated risk immediately updates the compliance posture score.

CQC Regulation 17: risk management evidence
2

Action assigned with deadline

Actions are created from the risk and assigned to a named owner with a due date. Every state transition (open, in progress, awaiting closure, closed) is timestamped and immutable.

CQC Regulation 17: traceable response to every identified risk
3

Evidence structured in an assurance pack

Risk entries, action plans, and governance records are assembled into a pre-structured assurance pack. Sign-off freezes the evidence at a point in time.

CQC Regulation 17: inspection evidence available before CQC asks
4

Governance review scheduled and evidenced

Regular governance reviews are scheduled, conducted, and signed off within the platform. The attendance record, decisions, and follow-up actions are retained in full.

CQC Regulation 17: scheduled governance activity evidenced

Connected to every other module

Governance does not operate in isolation. It is connected to the compliance, staffing, and workforce layers.

Hours → Minutes

Time to assemble CQC inspection evidence when using assurance packs

Real-time

Compliance posture and governance health scoring update as records change, not on a schedule

Reg 17

Every governance module (risk register, action plans, assurance packs, reviews) maps directly to CQC Regulation 17

Governance questions

What care providers ask about the governance operating layer.

Yes. Open and escalated risks feed directly into your compliance posture score. A risk with no mitigation plan in place will affect your inspection readiness state, which is visible on the dashboard in real time.
Yes. Each action plan has a named owner, a due date, and a status. Managers receive notifications when actions are assigned to them, when deadlines approach, and when actions are awaiting closure approval.
Assurance packs can be organised by CQC theme or regulation. Evidence from compliance records, incidents, governance reviews, and action plans is attached to the relevant pack sections. When an inspector requests evidence for Regulation 17, the pack is already assembled.
Yes. Entity benchmarking shows governance health metrics per location (open action counts, overdue percentages, review completion rates, incident frequency, and risk register status) in a single comparative table.
Yes. All features are included from the standard per-user price. There is no separate governance module fee and no feature gating.

See governance in your environment

Book a demonstration tailored to your governance requirements: your risk register, your assurance structure, your CQC context.