Recoverly compliance checklist

Before you offer Recoverly: a checklist

Tick these off with your own HR, legal or data-protection adviser. It is a prompt for your conversation, not legal advice.

Tell people the truth

☐ Say plainly that joining is voluntary, that you are not told who joins, and that you cannot see what anyone logs.
☐ If you receive the anonymous monthly report, say that people choose whether to be counted.
☐ Do not link use of Recoverly to appraisals, discipline, pay, cover or treatment decisions.

Safety and care

☐ Name a person who runs the launch session and who people can talk to.
☐ Check that your own support contacts (the ones shown in the app) are correct, staffed and honest about their hours.
☐ Agree what a manager does if someone discloses a problem or seems unsafe: use the disclosure protocol in the toolkit.
☐ Remember the app is not treatment: heavy drinkers should see a doctor before stopping suddenly.

Data protection

☐ Read the trust page and privacy policy, and have your adviser confirm the roles and any agreement you need.
☐ Confirm where your own staff keep the private report link (it is a secret) and who has it.
☐ Clinics and community services only: decide who holds the team's workspace passphrase and key file, and where they are backed up. Nobody can recover them for you.
☐ Clinics only: confirm that no person is required to share as a condition of treatment.
☐ Workplaces, colleges and insurers: the individual-level workspace is not available to you, by design.

Ending a pilot

☐ Agree what happens at the end: whether the programme code stays, and who tells your people.
☐ People can leave or delete their own data at any time in Settings.

Tell people the truth

☐ Say plainly that joining is voluntary, that you are not told who joins, and that you cannot see what anyone logs.

☐ If you receive the anonymous monthly report, say that people choose whether to be counted.

☐ Do not link use of Recoverly to appraisals, discipline, pay, cover or treatment decisions.

Safety and care

☐ Name a person who runs the launch session and who people can talk to.

☐ Check that your own support contacts (the ones shown in the app) are correct, staffed and honest about their hours.

☐ Agree what a manager does if someone discloses a problem or seems unsafe: use the disclosure protocol in the toolkit.

☐ Remember the app is not treatment: heavy drinkers should see a doctor before stopping suddenly.

Data protection

☐ Read the trust page and privacy policy, and have your adviser confirm the roles and any agreement you need.

☐ Confirm where your own staff keep the private report link (it is a secret) and who has it.

☐ Clinics and community services only: decide who holds the team's workspace passphrase and key file, and where they are backed up. Nobody can recover them for you.

☐ Clinics only: confirm that no person is required to share as a condition of treatment.

☐ Workplaces, colleges and insurers: the individual-level workspace is not available to you, by design.