A CQC evidence owner matrix for small care providers

A small care provider may have a registered manager, a deputy and a few team leads rather than a dedicated compliance department. That makes evidence ownership especially important. When a concern, audit or inspection arises, the service must be able to show where current records live, who reviews them and how information leads to improved care. An evidence owner matrix is a simple way to make those responsibilities visible without creating a second bureaucracy.

The Care Quality Commission (CQC) guidance on assessing quality and performance, updated in July 2026, says it assesses services against quality statements and considers different evidence categories, collecting evidence both on and off site. Its evidence-category guidance cautions that sector lists are a guide rather than a universal checklist. This page addresses who maintains and reviews existing evidence for an English small provider, not a promise that a matrix guarantees a rating.

Start with the work the service already does

List the records used to manage care quality: care-plan reviews, medicines audits, incident learning, safeguarding actions, staff supervision, training, feedback from people using the service and improvement plans. Identify the real source system or folder for each. Avoid asking staff to copy every record into a new “CQC folder”; duplicated files age quickly and may conflict with the operative record.

Map each stream to the relevant quality statement or management question only after identifying what the service actually uses. A single record can inform more than one question, while a quality statement cannot be proved by one document alone. CQC may consider people's experiences, staff and partner feedback, observations, processes and outcomes. A local matrix helps the provider retrieve and review evidence; it does not decide what CQC will inspect.

Name an accountable owner and a practical deputy

For every evidence stream, specify who creates the record, who reviews it, who acts on gaps and who can locate it when the primary owner is absent. “Management team” is too vague during leave or turnover. Small services may assign several streams to one person; that is acceptable if capacity is realistic and a deputy can keep essential safety actions moving.

Separate ownership of the record from professional responsibility for the care decision. A coordinator might collect training completion data, while a clinical or registered manager assesses whether a worker can perform a delegated task. The matrix must not imply that a digital check replaces judgement, safeguarding escalation or the provider's legal duties.

Set a review rhythm based on risk

Record when each source is updated and how often a manager examines trends or exceptions. A medicines incident needs a timely response, while a routine policy review may follow a planned cycle or be triggered by new guidance. Do not set identical monthly deadlines for every item just to make a dashboard uniform. Add triggers for complaints, serious incidents, changed regulation or a new service model.

The CQC Regulation 17 guidance on good governance describes effective systems to assess, monitor and improve quality and safety and to maintain accurate records. The matrix should support that continuous process. If an audit identifies repeated gaps, assign a corrective owner, due date, verification and learning route. A complete register with no follow-through is weak evidence of governance.

Make evidence retrievable but protected

Give each stream a location, access rule and retention owner. Some records contain highly sensitive health or safeguarding information. The matrix can point to a controlled record without exposing the contents to everyone who sees the index. Include how a reviewer will get lawful access when needed and who checks version history. Avoid storing personal data in an open planning spreadsheet.

Test retrieval by asking a deputy to find the latest medicines audit, incident review and staff supervision action. If the answer depends on one person's inbox, fix the process. Note when the matrix itself was last checked against the real record system. A link to an obsolete folder may create false reassurance.

Example: learning from a medication error

An incident record is created by the shift team and reviewed by the manager. The matrix points to the controlled incident system, names the manager who checks the immediate response, and names a deputy who tracks the learning action during leave. The medicines lead reviews whether the same problem has appeared elsewhere, and the service records how staff were briefed. At the next governance meeting, the action is verified against practice rather than closed when a document is uploaded.

This is more useful than adding the incident file to a quality-statement folder with no owner for the outcome.

Keep the matrix small and current

Use fields such as evidence stream, source location, primary owner, deputy, review trigger, last check, open exception and linked quality statement. Review the matrix after staff changes and when CQC updates its published guidance. CQC has consulted on future assessment changes; a draft framework should not be described as current law or current assessment practice until formally implemented. Use the live CQC provider assessment guidance at the time of publication.

The Complys CQC compliance software page is the final-map product route for discussing how a small provider could organise current evidence and assigned owners. Verify the present feature set and the destination page's claims before publication. This guide does not claim Complys predicts CQC ratings, automatically judges evidence sufficiency or submits records to the regulator.