At Physiopedia Plus (including the Physiopedia AI Assistant), we maintain enterprise-grade security standards that meet or exceed global best practices. As a European-based organisation, we operate under some of the world’s most stringent data protection regulations, ensuring your data receives the highest level of protection.
GDPR Leadership
We are fully compliant with the General Data Protection Regulation (GDPR), which is widely recognised as the global gold standard for data protection. GDPR requirements often exceed those of other international frameworks.
HIPAA
We are fully compliant with the Health Insurance Portability and Accountability Act (HIPAA), a U.S. federal law that protects the privacy and security of people’s health information and sets rules for how healthcare organisations and their partners must handle this data.
ISO 27001 Certification
We are pursuing ISO 27001 security management system certification. ISO 27001 is the most widely recognised international standard for information security. As part of this process we have implemented a systematic approach to managing sensitive information, continuous improvement of security controls and a risk-based security management approach.
Security Controls & Measures
Data Protection
- Encryption: All data is encrypted in transit and at rest
- Access Controls: Data access is controlled with multi-factor authentication and role-based permissions
- Data Minimisation: We collect and process only necessary data and actively prevent the storage of individual Protected Health Information PHI
- Third parties: where data is processed by third party organisations during service delivery, this is shared on a zero retention basis
Infrastructure Security
- Secure Hosting: EU-based data centers with SOC 2 Type II certification
- Network Security: Firewalls, intrusion detection, and continuous monitoring
- Vulnerability Management: Regular security assessments and penetration testing
- Backup & Recovery: Daily automated backups with tested disaster recovery procedures
Our commitment
By choosing Physiopedia Plus, you’re partnering with an organisation that operates under Europe’s world-leading data protection framework, is working towards international security certifications, implements security controls that meet or exceed global best practices and provides transparency and accountability in all data processing activities.
Our commitment to your security and data protection is core to our business values and operational excellence.