ISO/IEC 27001 recertification: Telepaxx Medical Data’s information security measures for the protection of medical image data validated

Büchenbach/Munich, 2 July 2026. Telepaxx Medical Data, a leading Software-as-a-Service provider for cloud-based medical image data management, successfully completed a comprehensive recertification in May 2026 in accordance with the internationally recognised information security standard ISO/IEC 27001:2022. The successful completion of the surveillance audit, carried out by the independent certification body DQS, confirms that the company is continuously developing its information security management system (ISMS) and operates it at the required high standard as a matter of the highest priority.

Continuous security as a corporate commitment

ISO 27001 is not a one-off security certification, but a living standard: it requires organisations to systematically identify, assess and manage information security risks through appropriate measures. This successful recertification demonstrates that Telepaxx Medical Data not only meets these requirements but has also embedded them as an integral part of its corporate culture and service quality.

„Our recertification to ISO 27001 sends a clear message to our customers and partners: at Telepaxx, we do not view information security as a temporary project, but as an ongoing commitment.“, comments Tobias Anger, Chief Executive Officer of Telepaxx Medical Data GmbH. „We have a particular responsibility when dealing with sensitive patient data, such as medical imaging data – a responsibility we live up to every day.“

Relevance to statutory requirements in the healthcare sector

For hospitals, radiology practices and other medical facilities, working with an ISO 27001-certified software provider brings tangible benefits. The certification serves as recognised proof of security to regulatory authorities and helps organisations fulfil their obligations under the Healthcare Digitalisation Act (DigiG), the NIS 2 Directive and the General Data Protection Regulation (GDPR). Software partners with a validated information security management system help to demonstrably reduce security risks in the supply chain.

In addition to ISO/IEC 27001 certification, Telepaxx Medical Data also holds a current BSI C5 certificate (Type 1) – further evidence of the high security standards of the company’s cloud infrastructure. The company plans to achieve Type 2 C5 certification by the end of 2026.

The current ISO 27001 certificate and further information on information security at Telepaxx can be found on the website at https://www.telepaxx.de/iso-27001