For a domiciliary care agency, the product is a system of record: who visited whom, with what training, and what was billed. Sigi’s delivered example is Allfor Care Services — a Harrow provider of home care and wheelchair-accessible transport. The platform consolidates HR, payroll, and accounting (replacing BambooHR, BrightPay, Xero, and QuickBooks), integrates GP Connect, HMRC, and DBS, and is framed for CQC, UK GDPR, and NHS DSPT. Commercial context: healthcare software and care operations.
CQC: records that can be retrieved, not reconstructed
On Allfor Care, CQC work is described against Regulation 17 of the Health and Social Care Act 2008 — good governance and record-keeping. The practical software meaning is complete, current, instantly retrievable care and staff records, with audit trails and management oversight. That is a data-model problem: a shift references a client and a staff member; a compliance document references the person it belongs to; an invoice line references the shifts it bills.
- Client profiles hold contacts, care and transport needs, and a history of delivered shifts.
- Staff records hold role, availability, and dated training and vetting documents.
- The rota is the centre of the model. Completed shifts feed invoicing, payroll views, and dashboards.
- Managers can see a worker’s documentation from the schedule, and the dashboard shows what is missing or expiring.
UK GDPR and the Data Protection Act 2018
Allfor Care’s platform uses role-based access and least-privilege views: a care worker sees their own shifts and clients; finance sees invoicing but not care notes. Audit logging records who viewed or changed sensitive records. Retention is defined rather than left as “keep everything.” The case study frames this as personal and clinical data handled to ICO expectations — not as a certificate Sigi invented.
NHS DSPT, GP Connect, HMRC, and DBS
- NHS Data Security and Protection Toolkit: the platform is built to the data-security standards that GP Connect and other NHS integrations depend on.
- GP Connect: authorized access to a service user’s GP record at the point of care, so medications and key clinical details are available without phoning the surgery.
- HMRC: PAYE payroll under Real Time Information — a Full Payment Submission on or before each pay day, with hours taken from completed shifts. Digital VAT records are kept in line with Making Tax Digital.
- DBS: certificate status and renewal dates against each worker so an expiring check surfaces before assignment.
What to implement in software, in order
- Linked entities and roles before any dashboard chrome.
- Dated compliance documents attached to people, readable from the rota.
- Shift completion as the event finance and payroll compute from.
- Integrations (GP Connect, HMRC, DBS) inside the workflow, not as a separate portal the coordinator forgets to open.
- Automated tests on those workflows. Allfor Care uses Playwright and GitHub CI/CD so changes are tested before they reach the care office.
Allfor Care’s Managing Director, Suzette Thomas, rated the work 5 out of 5 on Sortlist (October 2025) and said Sigi “took the time to understand how the care sector works and built the system around our real needs.” Her improvement note — that a quicker turnaround on some design tweaks would have helped — is recorded in the case study as written.
Related Sigi reading
Full product write-up: Allfor Care case study. Money pages: healthcare and care operations. If the next build is a consumer app rather than a care office, see how much it costs to build a mobile app.

