Certifications & Compliance
- ADISA ITAD Essentials Certification Gold Level
- Triple ISO Certified
- Medical Industry Accredited (MIA)
- NHS Digital Toolkit (Standards Exceeded)
- Cyber Essentials Plus
The BMA Assurance
At British Medical Auctions, compliance isn't a box-ticking exercise - it's the foundation of everything we do.
From secure data destruction and radiation safety to dangerous goods transport, environmental responsibility and quality management, we've invested heavily in the people, processes and specialist partnerships that enable us to operate to the highest standards.
Every year we dedicate thousands of hours to independent audits, staff training and continuous improvement, giving healthcare organisations complete confidence that their equipment is managed safely, securely and responsibly throughout its entire lifecycle.
Triple ISO Certified
ISO standards are independently audited and demonstrate our commitment to delivering safe, consistent and continually improving services.
ISO 9001 - Internationally recognised management systems covering Quality Management ensuring structured, consistent and auditable processes across all services.
ISO 14001 - Internationally recognised management systems covering Environmental Management, reflecting our responsibility to manage waste streams, surplus assets and environmental impact correctly.
ISO 45001 - Internationally recognised management systems covering Occupational Health & Safety, protecting staff, clients and visitors through robust health and safety systems.
Certified, Audited and Trusted by Industry Bodies
From secure data destruction to quality, safety and environmental management, every accreditation we hold is independently audited. Together, they give NHS Trusts and healthcare providers complete confidence in how we work.
ADISA ITAD Essentials Certification Gold Level - The highest level of independently verified assurance for secure data management, sanitisation and destruction. We are the first healthcare company to achieve this, demonstrating that our data handling processes exceed recognised industry best practice.
Cyber Essentials Plus - The higher, independently audited level of the UK Government backed Scheme. It involves a technical audit of the company IT systems by an external expert.
Medical Industry Accredited (MIA) - Recognised by NHS Trusts and healthcare providers, MIA membership confirms that BMA meets the rigorous standards required to operate safely and professionally within healthcare environments.
Corporate Certifications & Industry Memberships
AXREM Affiliate Member - BMA is a member of AXREM, the Association of Healthcare Technology Providers. Membership connects us with the wider healthcare technology sector and reflects our commitment to professional standards, responsible practice and collaboration across the industry.
NHS Data Security and Protection Toolkit (Standards Exceeded) - BMA completes the NHS Data Security and Protection Toolkit, demonstrating that our data security measures not only meet, but exceed the required standards for protecting sensitive health and care data.
Information Commissioner's Office (ICO) Registration & Data Protection Governance - BMA is registered with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection and information rights. Our wider data governance framework is designed to support our obligations under UK data protection legislation, including the UK GDPR and Data Protection Act 2018.
Supported by Industry Specialists
Some areas of compliance require specialist expertise. That's why we work alongside leading independent organisations to ensure every aspect of our operation is supported by recognised experts.
Blancco are global leaders in certified software-based data sanitisation, providing the technology that underpins our secure data erasure services.
Aurora are our Independent Radiation Protection Advisers (RPA), supporting the safe handling, storage and transportation of radiation-emitting medical equipment.
Logicom are our Dangerous Goods Safety Advisors (DGSA), ensuring the compliant transport of regulated and hazardous medical equipment in accordance with UK and international legislation.
We use the AT-RACK Desktop Destruction System (DDS) as part of our secure data destruction process, enabling data-bearing media to be physically destroyed on-site.
Built for Healthcare Environments
Our processes are designed specifically for healthcare environments, helping organisations manage surplus equipment safely and with minimal disruption.
DBS-checked staff - All BMA field staff undergo formal Disclosure and Barring Service (DBS) vetting. This supports secure, unescorted operations within hospitals, healthcare facilities and other sensitive environments.
On-site and on-location data deletion - Where required, data can be securely erased or destroyed on location during decommissioning. Localised destruction helps mitigate chain-of-custody risks before equipment is transported.
Experienced healthcare teams -Our teams understand the controls, procedures and responsibilities involved in working within busy clinical environments. This includes planning work around operational requirements, protecting equipment and data, and maintaining safe working practices.
Specialist Facilities & Responsible Disposal
Our responsibility doesn't end when equipment leaves a healthcare site. Every item, component and material generated through our operations is handled, tracked and disposed of through controlled processes.
WEEE-compliant disposal - batteries, electrical components and surplus parts are routed through the correct appropriate waste streams under WEEE requirements.
Documented waste handling - Clearly defined processes provide accountability from our facilities through to final disposal or recycling.
Digital Waste Tracking (DWT) - Every waste movement is recorded digitally and reported to DEFRA, giving full transparency.
Responsible packaging - Our packaging meets applicable EU Packaging and Packaging Waste Regulation (PPWR) requirements, reducing waste and supporting the circular economy.
Specialist Compliance for Hazardous Equipment
Some medical equipment requires specialist handling. Our trained in-house teams are supported by independent experts who audit our compliance every year.
Radiation safety - We are HSE registered to carry out test exposures for the functional testing of X-ray systems, with qualified Radiation Protection Supervisors (RPS) on our team. Aurora provides our Radiation Protection Adviser and conducts annual compliance audits to support safe and compliant operations.
Dangerous goods and batteries - Our drivers and warehouse staff are trained in transporting batteries by air, sea and road, in line with CAA, ADR and IMDG requirements, so batteries are collected, stored and packaged safely and legally. Logicom provides our Dangerous Goods Adviser, carries out annual audits and keeps us up to date with regulatory changes.
