Compliance & security
ISO 27001
International standard for information-security management systems.
ISO 27001 certifies a vendor's information-security management system against a defined international standard. It's expensive to obtain and audit, so its presence is a meaningful trust signal — especially for European deployments where SOC 2 is less culturally dominant.
See also
- SOC 2 Type II — Independent audit of a vendor's security controls over a period of time.
- GDPR — EU data-protection law — non-negotiable for any EU healthcare deployment.