Buechenbach/Munich, July 22, 2025. Telepaxx Medical Data, a leading software-as-a-service provider for medical image data management in the cloud, will obtain certification in accordance with the internationally recognized ISO/IEC 27001:2022 standard in July 2025. This certification confirms that the company has implemented an effective information security management system (ISMS) that systematically identifies, assesses and addresses information security risks through appropriate measures. The aim of these measures is to ensure the confidentiality, integrity and availability of medical image data and other information.

“The ISO 27001 certification is another milestone for us as a company to prove that we apply and fulfill the highest requirements for secure image management”, comments Tobias Anger, Managing Director and Chief Technology Officer of Telepaxx Medical Data GmbH, on the certification. “We are also one of the first cloud software providers to fulfill all the requirements of the DigiG and the Equivalence Ordinance that have been in force since July.”

Relevant for compliance with legal requirements such as DigiG, NIS-2 and GDPR
For hospitals and radiologists, working with an ISO27001-certified partner offers a number of benefits, particularly with regard to the protection of sensitive patient data, which is increasingly subject to legal requirements. For example, the Act on the Digitization of Healthcare (DigiG), reinforces the need for hospitals and other medical facilities to implement robust IT security measures, including compliance with minimum requirements for cloud-based information systems in accordance with C5 or, until a transition period, ISO 27001.

The European NIS-2 Directive also places higher demands on the cyber security of medical facilities. For example, NIS-2 places a strong focus on supply chain security. Medical facilities that fall under the NIS-2 regulations are obliged to assess the cyber security risks posed by their service providers and third-party suppliers. An ISO 27001-certified software partner can serve as proof that the partner complies with appropriate security standards and thus reduces the risk of security incidents in the supply chain. An ISO 27001 certificate from the software partner also simplifies the provision of evidence to supervisory authorities, as it represents an externally validated certificate for information security.

"Security certificates for software products are not just a ‘nice-to-have’ for medical facilities, but a strategic necessity. They provide massive support in meeting legal requirements, minimize risks when handling highly sensitive data and strengthen trust in the increasingly digitalized processes in the healthcare sector", summarizes Tobias Anger the advantages of using certified software partners for healthcare facilities.