Is this you?

You are registered with the Care Quality Commission in England, or Healthcare Improvement Scotland, or an equivalent. You have several practitioners. You do not run your own operating theatre.

The clinical side of your software probably works well. The part that tends to sit outside it is everything registration adds on top: a policy set that has to be versioned and acknowledged, an audit schedule, a risk register, incidents and complaints with actions that have to close, practising privileges and indemnity with renewal dates to watch, and a training matrix the whole team can rely on.

Velastria Business is £250 a month for the whole practice, with unlimited users.

What good software does for an inspection

Compliance is what your team does, and your registered manager owns it. What software can do is make the evidence exist as a by-product of the work, so that it is already assembled on the day somebody asks instead of taking a fortnight to pull together.

That is the whole design intent here. The audit trail is written because someone opened a record, not because someone remembered to log it. The policy acknowledgement exists because the member of staff clicked it. The expiry alert fires because the date was in the system, not because a manager kept a diary note.

Three things worth asking any vendor to show you

A feature list tells you very little. An evidence trail tells you everything. Ask us these on a demo, and ask whoever else you are considering the same three.

"Show me that every clinician has current registration and mandatory training."

Credentialing holds GMC and NMC registration, indemnity and practising privileges per clinician; the training matrix holds CPD and competencies. Both carry expiry dates that alert before they lapse, and staff maintain their own records. The answer is a screen, not a spreadsheet somebody updates before an inspection.

"Show me an incident reported, investigated, actioned, reviewed and closed."

Incidents, complaints and CAPA live in the quality management system alongside the risk register. Actions are tracked through to closure, so an incident that has not been closed is visible as an open item rather than as a gap nobody has noticed.

"Show me evidence of our clinical audit programme."

Audits are scheduled, run from templates and followed through to closure with their evidence attached, and inspection-ready evidence packs and governance reports are generated on demand from the records you were already keeping.

The governance side

Quality Management System

Incidents, complaints, CAPA and a live risk register in one governed place, with actions tracked through to closure rather than to a meeting.

Internal audits

Schedule audits, run them from templates, and follow findings through to closure with the evidence attached.

Controlled documents

Version-controlled policies with approval workflows and recorded staff acknowledgement, so "everyone has read it" is a fact rather than an assumption.

Credentialing and practising privileges

GMC and NMC registration, indemnity and practising privileges tracked per clinician, with expiries that surface before they matter.

Training matrix and revalidation

CPD, competencies and expiry alerts across the team, with self-service so staff maintain their own records.

Evidence packs

Generate inspection-ready evidence and governance reports on demand, from the records the practice was already keeping.

Equipment register

An asset register with servicing and calibration, so the equipment question during an inspection has an answer already.

Audit trails and subject access

Comprehensive logs of who accessed and changed what, and the ability to answer a subject access request from the record rather than by hand.

And the operational side

Everything in Pro

Clinical records, booking and diary, digital consent, clinical photography, quotes, card payments, invoicing and financial reporting, all with unlimited users.

Stock control

What you hold, what you used and what it cost, connected to the treatment rather than counted separately.

CRM and enquiries

Enquiries, leads and the pipeline through to a booked patient, in the same system as the clinical record they become.

Meetings

Recording, minutes and action points, which is where a governance meeting stops being a document somebody has to write up afterwards.

Telephony and SMS

Your own clinic number with call handling, SMS reminders and messaging, and an AI phone receptionist for the calls nobody reached.

Every AI feature

AI ambient consultation transcription, AI clinical coding and AI letter drafting, on this plan as on every other. Billed per use; most clinics spend £30 to £60 a month.

None of it matters if the notes are a chore

Governance tooling is worthless sitting on top of clinical records nobody wants to write. The consultation itself is one screen: the note, the photographs, the annotated diagram, the products with their lot numbers and expiry dates, the consent and the letter.

For an injectable practice that means speaking the product, lot number, expiry, dose and sites aloud and having them land in a structured record, or photographing the labels and having Velastria read them. For a surgical practice it means operation notes from your own templates, with drawings, and implant traceability recorded per side.

Structured rather than free text is what makes the governance side possible at all: a recall, an audit or a regulator's question becomes a query instead of a week of reading notes. See how the consultation workspace works →

Built by someone who has been inspected

Velastria is built and run by Taimur Shoaib: consultant plastic surgeon, Diploma in Medical Informatics, and the founder of an HIS-registered private hospital that he ran for five years before selling it.

The governance module is not a feature list assembled from a regulator's website. It is the set of things he needed to have ready, built by the person who had to have them ready.

How data is held, isolated between clinics and exported if you leave is set out on the trust and security page.

What £250 replaces

The question is not whether Velastria costs more than a records system. It is what else you are currently paying for. A registered practice typically runs a clinical system plus a compliance or QMS tool, a separate CRM, a policy folder somewhere, an HR and credentials spreadsheet, an incident log, a booking or reminder service and an AI transcription subscription.

Business is £250 a month for the practice with unlimited users, and every AI feature is included rather than sold as a tier. If it removes three of those systems it has paid for itself, and the governance evidence stops being spread across all of them.

When you would need a different plan

If you run your own operating theatre, you need operating lists, admissions and patient tracking, a status board, surgeon preference lists and theatre rotas. That is Enterprise, at £950 a month per site, and it is the plan built for aesthetic surgery hospitals.

If you are not registered with a regulator, most of this page does not apply to you and you should be looking at Pro, at £75 a month.

Frequently Asked Questions

Which Velastria plan is right for a CQC-registered clinic?

Business, at £250 per practice per month with unlimited users. It adds the quality management system, internal audits, controlled documents, credentialing, training matrix, equipment register and stock control to everything in Pro.

How does Velastria support CQC compliance?

Compliance is what your team does and your registered manager owns it. Velastria's role is to make the evidence a by-product of the work, so that audit trails, policy acknowledgements, credential and training expiry alerts, incident closures and audit findings are all there and current on the day an inspector asks, rather than being assembled beforehand.

Does it work for Healthcare Improvement Scotland as well as CQC?

Yes. The governance module is built around the evidence both regulators ask for, and the founder ran a registered private hospital in Scotland. The same quality management, audit, controlled document and credentialing tools apply.

Can it track practising privileges and indemnity?

Yes. GMC and NMC registration, indemnity and practising privileges are tracked per clinician, alongside a training matrix covering CPD, competencies and revalidation, with alerts before expiry.

How many users does the Business plan include?

Unlimited. The plan is priced per practice, not per user, so every member of staff has their own login, their own permission level and their own audit trail without changing the bill.

Can I move from another system without losing my governance history?

Migrations are run by the Velastria team and validated by your own team in a staging environment before cutover. What can be carried across depends on what your current system will release, which is established before any migration is agreed.

Talk to someone who has run a registered practice.

Describe your governance year and where it currently hurts. Enquiries go directly to the founder.