
This Software & Cloud Evaluation Framework provides New Zealand general practices with a structured approach to assessing new software and cloud services before implementation. It is designed to help practices identify privacy, security, contractual, jurisdictional, and Māori Data Sovereignty risks early, acting as a cyber security and information governance check, so issues are addressed before time, money, and clinical trust are committed.