The most common question commissioners ask TIFA Life is this: if you are not CIW registered, how do we know you are safe? It is a fair question and deserves a direct answer. This is how 16+ supported accommodation providers should be operating in the absence of CIW oversight — and how commissioners should test whether they are.
The regulatory reality
16+ supported accommodation is not regulated by Care Inspectorate Wales. This is the correct position under current Welsh legislation — CIW's scope covers registered residential care, not supported accommodation for young people aged 16 and over.
This is not a loophole. It is not a gap that providers are exploiting. It is a deliberate scoping decision reflecting that supported accommodation is a housing-plus-support model oriented toward independence, not a care setting with the supervisory intensity that CIW regulation is designed for.
What is more: providers claiming to be "CIW registered" or "CIW regulated" for 16+ supported accommodation are misrepresenting their position. That misrepresentation is itself a safeguarding red flag. If the most basic fact about a provider's accountability is wrong on their website, the rest of their claims warrant close scrutiny.
What commissioners should expect in the absence of regulation
Regulation creates a baseline. In its absence, providers need to build an internal system that meets or exceeds what a regulated equivalent would require. Commissioners are entitled to expect this — and should insist on seeing it during due diligence, not take claims on trust.
The five components of a credible safeguarding framework
1. Escalation routes
A written, shared safeguarding flowchart for every placement. Staff know exactly who to call, in what order, for what category of concern. The Local Authority allocated worker is on that flowchart. The Designated Safeguarding Lead is named. The out-of-hours path is named. No placement operates without this.
2. Staff vetting
Enhanced DBS for every member of staff who has direct contact with young people. Right-to-work verified. Reference chain completed before any unsupervised shift. Probation review at three and six months. Rolling DBS updates. Not "we check" — documented, auditable, provided on request.
3. Incident reporting
Logged within two hours for serious incidents, within 24 hours for all others. Post-incident review within 72 hours, signed off by Operations Lead — never by the staff member involved in the incident. Notified to the Local Authority on defined timelines. No selective reporting.
4. Post-incident review
Every incident gets reviewed — not just to establish what happened, but to identify what the placement, the staff and the provider need to change. Actions captured, owners named, dates for completion tracked.
5. Pattern analysis
Individual incidents are events. Three similar incidents across different placements are a pattern. Good providers track across the whole operation — surface-level quarterly reviews, forensic when something flags. Patterns caught early prevent the next incident.
How TIFA Life structures safeguarding
Our layered model sits on top of the basic framework above. The first layer is suitability — we decline placements where presented needs exceed our ability to safely support. The second layer is the trained, vetted team, with enhanced DBS and structured induction before unsupervised practice. The third layer is the escalation chain: support worker, senior support worker, service manager, operations lead, CEO — no staff member manages a concern alone.
The fourth layer is reporting — structured updates to the Local Authority on a defined cadence, with immediate escalation for anything significant. The fifth is governance — policies, training records and incident logs available to commissioners on request as part of due diligence.
Our full framework is set out on our quality and safeguarding page, including the four operational control gates that gate every new placement.
A due diligence checklist
If you are evaluating a 16+ supported accommodation provider, ask for the following in writing:
- Written safeguarding policy (dated, reviewed annually)
- Staff training record — what is mandatory, when it was last completed, by whom
- DBS and vetting records — confirmation of enhanced DBS for all direct-contact staff, process for updating
- Named Designated Safeguarding Lead and deputy
- Incident reporting protocol with defined timelines and reviewed audit trail
- Escalation flowchart
- Sample incident report, redacted — to test what reporting actually looks like
- Supervision structure — how often, by whom, documented how
- Insurance certificate (public liability, employer liability, professional indemnity)
A provider who can produce this inside a week is a provider with real infrastructure. A provider who takes months, sends vague replies, or dodges the request is telling you what the operational reality looks like — listen to it.
The Welsh Government's direction
The Welsh Government is developing supported housing standards as part of the broader regulatory landscape. Responsible providers are not waiting for those to be imposed — they are building to exceed them already. The direction of travel is toward more transparency, more accountability and more evidence of outcome. Providers who are not investing in those systems now will find the shift expensive when it arrives.
Request our framework
If you are commissioning a placement and want to see TIFA Life's full safeguarding framework, we will send the policy suite, training records and incident reporting standards on request. Email hello@tifa.co.uk. Or see the summary on our approach page and the full operational model on 16+ supported accommodation.