How do NHS organisations buy VR therapy?

By the DancingMind team · Updated 14 November 2026

Short answer

Through assessment and procurement rather than grants. NHS organisations assess digital health tools against the Digital Technology Assessment Criteria (DTAC); an updated form replaced the previous version from April 2026. It covers clinical safety, data protection, technical security, interoperability, and usability and accessibility. Buyers then weigh the evidence behind the product's claims and the implementation plan.

Assessment comes before procurement

NHS organisations don’t buy digital therapy through grants. They assess it, then procure it. The common gateway is the Digital Technology Assessment Criteria (DTAC), which NHS England updated in February 2026 with a shorter form and clearer guidance; the previous version was retired from April 2026. DTAC covers five areas:

Clinical safety, including compliance with DCB0129.
Data protection, including UK GDPR compliance and data flows.
Technical security.
Interoperability.
Usability and accessibility, now referencing WCAG 2.2 AA.

Clinical safety standards

Two NHS standards govern clinical risk in health IT. DCB0129 applies to the manufacturer: a clinical safety case and hazard log, overseen by a named Clinical Safety Officer. DCB0160 applies to the NHS organisation that deploys and uses the system. A supplier that already maintains DCB0129 documentation makes the buyer’s DCB0160 work much faster.

Evidence

NICE’s evidence standards framework sets out what evidence to expect for different kinds of digital health technology, scaled to what the technology does and its risk. In practice, buyers ask whether trial results match the claims made and whether they come from a population like their own.

Routes to purchase

Once a product passes assessment, it can be bought through an existing procurement framework, a direct award within the organisation’s thresholds, or a funded pilot, for example through a regional Health Innovation Network or an innovation programme such as SBRI Healthcare. Procurement teams set the route; clinical champions and digital teams usually start the conversation.

What suppliers should have ready

A completed DTAC form with supporting evidence.
A DCB0129 clinical safety case and hazard log, with a named Clinical Safety Officer.
UK GDPR documentation: data flows, hosting and a data-processing agreement.
Evidence matched to every claim, with the study level stated.
An implementation plan: training, workflow, support and the outcomes the pilot will measure.

Where DancingMind fits

DancingMind works with NHS trusts and care partners in the United Kingdom, and its MindRelief programmes were developed with NHS partners. DancingMind prepares the DTAC documentation and maintains a DCB0129 clinical safety case for each NHS engagement; the trust centre lists what is available. A DancingMind co-author contributed to a peer-reviewed study in Nursing in Critical Care on implementing VR exposure therapy after intensive care.

Common questions

Is DTAC mandatory?

DTAC is the national baseline NHS organisations use to assess digital health technologies. NHS England introduced an updated DTAC form in February 2026, and organisations moved to it from April 2026.

Who completes the DTAC?

The supplier completes the DTAC form and provides the supporting evidence; the NHS organisation buying the technology reviews and assesses it.

What is the difference between DCB0129 and DCB0160?

Both are NHS clinical risk-management standards for health IT. DCB0129 applies to the manufacturer, who keeps a clinical safety case and hazard log with a named Clinical Safety Officer. DCB0160 applies to the NHS organisation deploying and using the system.

What evidence do NHS buyers expect?

NICE's evidence standards framework sets out the evidence expected for digital health technologies, scaled to their function and risk. Expect buyers to ask for results matched to the claims made, in a population like theirs.

This guide is general information for care providers and families, not medical advice. Results from specific studies apply to specific populations; always seek the advice of a qualified health provider. How we match claims to evidence: responsible claims.