commvita
Connected care platform
GOVERNANCE & ASSURANCE EDITION

Financial Recovery & SIP

Five figures reported separately, because a pipeline idea and a validated saving are not the same fact. Confidence derived from lifecycle rather than typed. Quality as a gate. And the scheme owner cannot validate their own delivery.

Live vs demonstrated: Live — real, API-backed platform logic (wired end-to-end today) Demonstrated — representative control surface with seeded data / illustrative UI mock-up

1Why a recovery plan usually reports a number nobody believes

A financial recovery plan — or a system improvement plan, a cost improvement programme, an efficiency programme, a QIPP plan; the local word varies and the thing does not — fails in a predictable way. Everything on the list is added together: the idea somebody had in a workshop, the business case in draft, the scheme already delivering, and the saving finance has actually evidenced. One headline goes to the board, and by month nine it is unrecoverable.

commvita reports five figures and never adds them together.

Five separate figures — because a pipeline idea and a validated saving are not the same factSumming them would produce the single headline nobody in the room believes. They are reported side by side.Gross — everything on the list£42.0mApproved — through the gate£31.5mForecast — what owners expect£27.8mConfidence-adjusted — weighted by stage£19.4mValidated — evidenced by finance£8.2mConfidence is set by lifecycle stage: an idea and an opportunity assessed count at 25%, a business case or submission at 50%, approved at 75%, in delivery at 90%, validated at 100%.
Gross is what is on the list. Approved has been through a gate. Forecast is what owners expect. Confidence-adjusted weights each scheme by how far through the lifecycle it actually is. Validated is the only one finance has evidenced — and it is the only one that belongs in a forecast outturn.
Twelve lifecycle states, each carrying its own delivery confidence25%idea25%opportunityassessed50%businesscase50%submitted75%approved90%in delivery90%delivering90%deliveredpending val.100%validateddelivered100%closedrejected and withdrawn count ZERO — and stay on the recordA scheme that fell over is not deleted. It is weighted at nought and kept, because the pattern of what an organisation keeps proposing and abandoning is itself afinding, and a plan that quietly loses its failures reports a delivery rate nobody can reconcile.
Confidence is not a judgement somebody types. It is derived from the lifecycle state, so a scheme cannot be optimistic about itself.

2What a plan must contain

The minimum content of an agreed recovery plan is not invented here. It is taken from Financial Recovery Plans in the NHS (Healthcare Financial Management Association, Financial Management and Research Committee) — eight essential elements, each mapped to whether commvita can check it from the record or can only record that it is present.

Eight essential elements — four checkable from the record, four notThe completeness score is over the CHECKABLE four ONLY, and says so. Scoring out of eight would imply commvita had assessed a cash flow statement it has never seen.Checked from structured dataThe extent of the financial problem, quantified — recurrent vs non-recurrentMeasures planned and agreed, profiled quarterly within the yearAssessment of delivery risk, with sensitivity and contingencyThe control environment — board committee, executive and finance ownersRecorded as present, not assessed as adequateBackground and cause of the financial problemsMeasures taken to date and their effectAssessment of cash impact — a saving is NOT the same fact as cash releasedFinancial proforma: I&E, balance sheet, EFL statement, cash flowA completeness score that silently counted a narrative section as satisfied would be the box-ticking the guidance warns against.
The distinction IS the point. commvita does not synthesise a cash flow statement it has never seen, and it does not infer cash impact from a savings value — a saving and cash released are two different facts.

The edition read is not current, and the product says so. Three facts are kept apart: the document was read (parsed, not recalled); it is cited; and its edition is not current — it references Strategic Health Authorities, Primary Care Trusts and HSC 1999/146, and SHAs and PCTs were abolished in 2013. commvita therefore encodes the durable principles and the minimum content requirement and deliberately does not reproduce the approval routes or circular references, because directing a finance director to a body that no longer exists would be worse than citing nothing at all.

3The six principles, as refusals

A principle written on a slide is advice. The same principle written as a gate is a control. Each of the six is enforced at a specific point and says what it enforces, so a reviewer can audit the claim rather than take it.

Six principles, encoded as refusals rather than as proseEstablish the baseline firstA scheme cannot reach approval without a baseline reference, source and date.Ownership is explicit, and not finance-onlyExecutive, operational AND finance owners are all required before approval.Pipeline is not deliveryFive figures reported separately and never summed into one.Phasing must be credible, not back-loadedThe share landing in the final quarter is computed and flagged above athreshold.Financial gain must not cost qualityAn impact assessment is required before approval; a high-impact scheme needsquality sign-off.Delivery is validated, not assertedThe scheme owner cannot validate their own delivery. A method and evidence arerequired.
The last one matters most in practice: the scheme owner cannot validate their own delivery, and validation without a method and an evidence reference is refused. A saving asserted by the person accountable for delivering it is not evidence.

4Quality is a gate, not a footnote

The join to Quality Impact Assessment is the part most savings systems leave out. A scheme's impact_level is a free string somebody types, and an approval gate that merely checks a label exists is a field which looks like it means more than it does.

So where a QIA is linked, the impact level is derived from the assessment and the typed value is ignored — a caller-supplied status is not trusted over a computed one. Where none is linked, the typed value is returned and reported as self_declared, with a note saying no assessment sits behind it. A board can therefore see which savings schemes carry an assessment and which carry only a word.

Cumulative impact is the failure a per-scheme gate cannot catch. Four individually acceptable schemes landing on one population is exactly the case the quality framework names — cost improvement “including the effect of cumulative CIPs within a service over time” — and it is why the two modules are joined rather than adjacent.

5One spine, one financial year, integer pence

One savings-scheme store, not twoQIPP schemes — /icb-commissioningTitle, category, target, achieved, status,lead, year.The requirements themselves name QIPP as onelocal word for this exact concept, alongsideSIP, CIP and FRP.RecoveryScheme — the spineQIPP schemes FOLD IN ON READ, projected intheir original shape./icb-commissioning is untouched; nobody's pagechanged.What a second store would have beenThe eighth split-brain in this codebase, afterDoLS, the SNOMED crosswalk, appraisals,accreditations, immunisations, messages andbilling.Two savings totals that disagree within onequarter.
QIPP schemes already existed. A second savings-scheme store would have been the eighth split-brain this codebase has found, so they fold into one spine on read and the existing commissioning page is untouched.

The financial year is a binding

Not April

April to March is England's financial year. This is a multi-jurisdiction product, so the calendar is resolved from the Jurisdiction Profile and fails safe to nothing: a plan whose jurisdiction has no configured calendar cannot phase, and says so, rather than silently phasing to England's year and then reporting a Q4 back-loading warning against the wrong quarter.

Money is integer minor units

Never a float

Every value is stored in pence. A float sum loses a penny per sub-penny row, and a recovery plan is summed thousands of times — across schemes, periods, cost centres and organisations. Two people reading the same plan must get the same total.

6Where it lives, and its honest edges

PartWhereStatus
Plans, schemes, phasing, validation, delivery teams /financial-recoveryLive
API/frp/ — 14 endpoints Live
The guidance, with its currency caveatGET /frp/guidance Live
What is enforced, and what cannot beGET /frp/methodology Live
Plan completeness against the eight elements GET /frp/plans/{id}/completeness Live
Financial-year calendar, resolved per jurisdiction GET/PUT /frp/calendarLive
Quality impact, derived or self-declaredGET /qia/scheme-impact Live
QIPP schemes folded in on read/icb-commissioning/qipp Live

Not verified against published guidance. The HFMA guide, the NHS efficiency map and NHS England revenue finance guidance are cited in the requirements this module was built from. hfma.org.uk and england.nhs.uk are both refused by this build environment's egress policy (measured: 403 at CONNECT), so the principles encoded here are taken from the requirements as supplied and verified_against_published_guidance is false in the API. Asserting conformance from an unread source is not something this product does.

Cash flow, the I&E account and the balance sheet are out of scope and are not synthesised. commvita records that they are required. It does not produce them, and it does not infer cash impact from a savings value.

What commvita cannot supply. The guidance's own four success factors are openness, involvement and communication, managerial capacity, and sound financial management. commvita can lay the true scale bare, name owners at every level, surface accountability gaps as exceptions, and enforce validation — it cannot make an organisation willing to publish the position, engage clinicians, supply leadership, or replace effective financial management. A well-structured plan can still be the wrong plan.

Models: FinancialRecoveryPlan · RecoveryScheme · SchemePhasing · SchemeValidation · SchemeTeamMemberAPI: /frp/ (14 endpoints) · Route: /financial-recovery · Guidance: HFMA, Financial Recovery Plans in the NHS (edition not current) · Non-SaMD
© 2026 Commvita Digital Health Solutions Ltd. All rights reserved.