←CIPHERER

Case Study

NHS Digital: the SUS+ national data platform during COVID-19

ClientNHS Digital (now NHS England)
MissionMove a national healthcare data platform to cloud without losing a minute of access during a pandemic response.
69Mpatient records (England-wide)

Stakes

The NHS Secondary Uses Service (SUS+) is the national repository for hospital activity data across England, covering the full patient population of roughly 69 million. During the height of COVID-19, SUS+ was the data foundation feeding pandemic response, vaccine research and clinical decision-making at scale. It was running on infrastructure that predated the demand then being placed on it. It had to move to cloud, it had to move quickly, and it could not go offline. Lives, vaccine programmes and a national emergency response were downstream of every decision.

Constraints

  • A live national platform: zero-downtime migration of records covering roughly 69M patients
  • High political and public visibility throughout the pandemic
  • Coordination across multiple third-party suppliers and government stakeholders
  • Strict information governance: NHS data is among the most sensitive held in the country
  • Hard regulatory boundaries, with every change accountable to clinical safety and data protection standards

Approach

Plan the migration as a clinical-safety event

We treated the migration not as an infrastructure project but as a clinical-safety operation. Every cutover step had a rollback, every validation point had clinical sign-off, and every data integrity check ran on both the old and new platforms and was reconciled before anything advanced.

No maintenance window

The platform ran across both estates through the transition, continuously reconciled, so the cutover itself was a configuration change rather than an outage. No clinician, researcher or analyst lost access to the data they needed during the migration.

Multi-supplier coordination under pressure

The programme spanned several suppliers, each owning a slice of the platform. We worked at the architecture and engineering interface, defining contracts, integration patterns and shared accountability so nobody was waiting on anyone and nobody was duplicating work. Governance was tightened to the cadence the pandemic required.

Audit and integrity by default

Every data movement was logged and traceable. Information governance teams could demonstrate the integrity of the migration end to end without having to reconstruct it after the fact.

Deliverables

  • Zero-downtime migration of the NHS SUS+ platform to cloud
  • Cutover patterns allowing the platform to run and reconcile across both estates during transition
  • Hardened information governance posture across the migrated estate
  • Multi-supplier coordination model and engineering operating cadence
  • Audit and integrity logging meeting NHS information governance standards
  • Operational handover to the long-term platform team

Outcome

SUS+ remained available to clinicians, researchers and the national pandemic response throughout the migration window. National healthcare data continued to flow securely to vaccine research, public health analysis and clinical decision-making, with no loss of integrity and no service interruption. The platform came out of it ready for the next decade of demand.

Disciplines

  • Cloud migration
  • Zero-downtime cutover patterns
  • Information governance
  • Multi-supplier architecture
  • Infrastructure as code

Compliance posture

  • NHS information governance
  • SOC 2 alignment
  • Clinical safety review
  • ICO data protection