Ir para o conteudo principal

Data Security

Overview​

vitalera implements defense-in-depth security measures to protect sensitive healthcare data throughout its lifecycle. As a CE-marked MDR medical device software platform for remote patient monitoring, security is engineered into every layer -- from network isolation to application-level encryption of patient vital signs and clinical observations.

Architecture​

Network Security​

  • Virtual private network isolation for databases and application servers
  • Least-privilege firewall rules
  • Web Application Firewall (WAF) for API protection

Data Encryption​

  • At rest: AES-256 encryption for all databases and storage
  • In transit: TLS 1.2+ for all API communications
  • Key management: Managed key service for encryption key management

Authentication and Authorization​

  • JWT-based authentication with OAuth 2.0
  • Role-based access control (RBAC)
  • API key rotation support
  • Session management with configurable expiration

Monitoring and Logging​

  • Application error tracking and diagnostics
  • Infrastructure monitoring
  • API audit logging
  • Automated alerting for security events

Data Backup​

  • Automated daily database backups
  • Point-in-time recovery capability
  • Cross-region backup replication

Compliance​

vitalera's security measures align with:

  • ISO 27001 information security standard
  • GDPR data protection requirements
  • ENS (Spanish National Security Framework)
  • MDR Annex I security requirements