What we are here to do
Dental practices and care providers handle some of the most sensitive personal data there is, yet most have no in-house IT or compliance team. They are still expected to meet the NHS Data Security and Protection Toolkit (DSPT), UK GDPR and PECR, and increasingly to hold Cyber Essentials. We give them a clear, independent view of where they stand, in plain English, and a practical route to the evidence they need.
The problem
Sources: Cyber Security Breaches Survey 2025/26, Department for Science, Innovation and Technology, 30 April 2026. Care Management Matters, 3 July 2026; the figure without a DSPT is derived from the 22,429 services reported as compliant.
The gap is not a lack of concern. It is that the usual options do not fit a ten-person practice: enterprise security firms are expensive and technical, generic IT support rarely covers governance documents, and templates do not tell anyone whether their own set-up actually works.
How the service works
Every engagement starts with a free external audit of the organisation's public web and email set-up, delivered as a written report within five working days. From there, clients can move to fixed-fee work:
No charge
External audit
Public web and email surface: encryption, email authentication, known vulnerabilities, forgotten sites, cookies and consent.
From £950
Full audit
All four areas (external surface, cookies and consent, governance documents, internal systems), an evidence pack, a remediation plan and a re-test at 60 days.
From £1,500
Standards readiness
Everything in the full audit, plus DSPT or Cyber Essentials evidence assembly and support through to submission.
From £250 per month
Ongoing assurance
Continuous monitoring, quarterly re-assessment, evidence kept current and the annual submission handled.
We also work alongside IT support providers, who carry out technical fixes while we provide the independent assessment and the governance evidence. Anything outside our scope, such as in-depth penetration testing or legal advice, is referred to specialist partners.
How we built it
- 26 automated technical checks and 59 documentation review criteria, mapped to the DSPT's ten National Data Guardian standards, the five Cyber Essentials controls, UK GDPR and PECR.
- Passive by default. The free audit only looks at what is already public. Nothing invasive happens without written authorisation.
- Client evidence encrypted at rest, with a tamper-evident, hash-chained audit log of who did what and when.
- Honest about limits. No assessment certifies compliance with any standard, and we say so on every report.
Who is behind it
Andrew Heppinstall
Founder
Andrew leads Unavoidably Secure and works directly with every client, with the team at Unavoidable Studio Ltd in Leeds. Clients get a direct line to the person doing the work, not a call centre.
Where we are
Unavoidably Secure launched in September 2026 and is taking on its first clients now. We would rather be clear about that than overstate it: this page will be updated with results as they come in.
Company details
| Trading name | Unavoidably Secure |
|---|---|
| Legal entity | Unavoidable Studio Ltd |
| Company number | 17367981 (Companies House) |
| Registered in | England and Wales |
| Registered office | 152 Osmondthorpe Lane, Leeds LS9 9EG |
| Client enquiries | support@unavoidablysecure.com · 07749 941111 |
Partnerships and investor relations
We are interested in hearing from IT support providers, dental and care groups, membership bodies and others who work with regulated small organisations, and from anyone who would like to know more about the business.
Email andrew@unavoidablysecure.com or book a call.
Important information. This page is for general information about Unavoidable Studio Ltd and the Unavoidably Secure service. It is not an offer or invitation to buy or subscribe for shares or any other investment, and it is not a financial promotion or investment advice.
Any discussion about investment would take place only with persons who fall within an applicable exemption under the Financial Services and Markets Act 2000 (Financial Promotion) Order 2005, and anyone considering an investment should take independent professional advice.