Data in transit
TLS 1.3 as the intended control for every connection between unit and platform.
Security and assurance
Trust is part of the product
In regulated and critical sectors, security decides whether you can buy at all. We treat it as a design requirement, and we are explicit about what is in place, what is planned and what still needs independent verification.
Controls
Availability, integrity, confidentiality and evidence
- In development
- Design objective
- Roadmap
Data at rest
AES-256 or equivalent, with documented key management and any exceptions stated.
Identity and access
Hardware identity per unit, role-based access and multi-factor authentication where appropriate.
Audit logging
Events and administrative actions logged, with agreed retention, export and review.
Secure updates
A controlled update process for firmware and software, backed by vulnerability management.
Privacy
Data minimisation, a DPIA template and clearly defined processing roles. No patient data unless explicitly contracted.
Independent assurance
Threat model, penetration test, gap analysis and independent assessment before broader roll-out.
Sector frameworks
Preparing for the rules your sector plays by
Formal use in regulated settings requires agreed validation and contractual roles. Until that work is done, we say “supports” or “preparing for”, never “compliant”.
PharmaceuticalAssessment against GxP, EU GMP Annex 11 and 21 CFR Part 11 where relevant.
Dutch healthcareGDPR and NEN 7510, with a completed DPIA and processing agreements before any personal data is used.
Defence and critical infrastructureNIS2 where applicable, export and sanctions screening, and specialist legal review before sensitive use cases.
We would rather show you the evidence than a badge.
For risk owners
Ask for our assurance package
Architecture, controls, current status and the roadmap, in one document for your security, privacy and quality teams.