The sources our DSPT work cites, and the models and software our reporting is built on.
Our DSPT assessments and reports are drafted and checked by open-weight language models that we run on our own hardware. The models are tested before they are used, their verdicts are checked by code, and every report is signed off by a person. This page acknowledges the sources our DSPT work cites, names the models and the open-source software behind it, and carries the notices their owners ask us to display.
Our DSPT assessments and reports cite primary sources: the toolkit itself, legislation, and regulators' rules and guidance. Where the licence on a source asks for an acknowledgement, it is given below. Naming a source describes what we cite; it does not imply that its publisher endorses Inquilion or Bentlebury.
Contains public sector information licensed under the Open Government Licence v3.0.
This covers the Data Security and Protection Toolkit, its assertions and guidance, published by NHS England. It also covers UK legislation published by The National Archives at legislation.gov.uk, including the Data Protection Act 2018 and the UK GDPR, and material from the Information Commissioner's Office (text only) and the National Cyber Security Centre.
The Data Security and Protection Toolkit is owned and operated by NHS England. Inquilion is an independent assurance provider and is not affiliated with or endorsed by NHS England.
The full list of sources behind InquilionGRC reporting, including European Union, United States and other regulators, is on the InquilionGRC acknowledgements page.
Llama 3.3 is licensed under the Llama 3.3 Community License, Copyright © Meta Platforms, Inc. All Rights Reserved.
Llama 3.2 is licensed under the Llama 3.2 Community License, Copyright © Meta Platforms, Inc. All Rights Reserved.
Llama 3.1 is licensed under the Llama 3.1 Community License, Copyright © Meta Platforms, Inc. All Rights Reserved.
Licensed by NVIDIA Corporation under the NVIDIA Open Model License.
Gemma is provided under and subject to the Gemma Terms of Use found at ai.google.dev/gemma/terms.
gpt-oss-120b (OpenAI), Qwen3-30B-A3B (Alibaba Cloud), Mistral-Small-24B-Instruct (Mistral AI) and nomic-embed-text (Nomic AI) are licensed under the Apache License, Version 2.0.
MiniCheck-Flan-T5-Large is licensed under the MIT License by Liyan Tang, Philippe Laban and Greg Durrett (MiniCheck: Efficient Fact-Checking of LLMs on Grounding Documents, EMNLP 2024). It is fine-tuned from Google's Flan-T5-Large, licensed under the Apache License, Version 2.0.
Our reporting runs on ollama and vLLM for model serving, LiteLLM for routing, Hugging Face Transformers and Python, each used under its own open-source licence.
Llama is a trade mark of Meta Platforms, Inc. Gemma is a trade mark of Google LLC. NVIDIA is a trade mark of NVIDIA Corporation. Other names are the property of their respective owners. Naming a model here describes what we use; it does not imply any endorsement of Inquilion or Bentlebury by its author.
This page was last updated in September 2026.