generated: '2026-07-20'
method: searched
source: fhir/patients-know-best-facade-capabilitystatement.json
standards:
- id: hl7-fhir-stu3
  conforms: true
  evidence: CapabilityStatement fhirVersion 3.0.2 (STU3), format application/fhir+json
- id: nhs-careconnect
  conforms: true
  evidence: >-
    PKB delivers demographic and clinical FHIR APIs conforming to the NHS
    CareConnect specification (per patientsknowbest.com/fhir and NHS England
    endorsement).
- id: oauth2
  conforms: true
  evidence: API secured with OAuth 2.0 client-credentials (patientsknowbest.com/fhir)
- id: fhir-operationoutcome-errors
  conforms: true
  evidence: FHIR servers return OperationOutcome resources on error (FHIR STU3 core)
- id: rfc9457-problem-details
  conforms: false
  evidence: FHIR uses OperationOutcome, not application/problem+json
- id: soc2
  conforms: true
  evidence: SOC 2 accreditation displayed on patientsknowbest.com accreditations
- id: cyber-essentials
  conforms: true
  evidence: Cyber Essentials accreditation displayed on patientsknowbest.com
- id: nhs-dsp-toolkit
  conforms: true
  evidence: NHS standards / NHS Digital integration accreditation displayed on patientsknowbest.com
- id: gdpr
  conforms: true
  evidence: UK/EU health-data controller; privacy statement at patientsknowbest.com/privacy-statement