Saltar al contenido principal

Data Security

Descripción general​

vitalera implements defense-in-depth security measures to protect sensitive healthcare data throughout its lifecycle. As a CE-marked MDR medical device software platform for remote patient monitoring, security is engineered into every layer -- from network isolation to application-level encryption of patient vital signs and clinical observations.

Arquitectura​

Seguridad de red​

  • Virtual private network isolation for databases and application servers
  • Least-privilege firewall rules
  • Web Application Firewall (WAF) for API protection

Cifrado de datos​

  • At rest: AES-256 encryption for all databases and storage
  • In transit: TLS 1.2+ for all API communications
  • Key management: Managed key service for encryption key management

Autenticación y autorización​

  • JWT-based authentication with OAuth 2.0
  • Role-based access control (RBAC)
  • API key rotation support
  • Session management with configurable expiration

Monitorización y registro​

  • Application error tracking and diagnostics
  • Infrastructure monitoring
  • API audit logging
  • Automated alerting for security events

Copia de seguridad de datos​

  • Automated daily database backups
  • Point-in-time recovery capability
  • Cross-region backup replication

Cumplimiento normativo​

vitalera's security measures align with:

  • ISO 27001 information security standard
  • GDPR data protection requirements
  • ENS (Spanish National Security Framework)
  • MDR Annex I security requirements