Buechenbach/Munich, March 5, 2025. Telepaxx Medical Data, a leading software-as-a-service provider for medical image data management in the cloud, is one of the first cloud providers in the healthcare sector with a C5 certificate (type 1). This certificate is mandatory for all cloud solutions used in medical facilities in Germany. The legal framework for this is defined by the Act on the Digitization of the Healthcare System (DigiG).

“Data protection and data security are an integral part of our cloud-based software solutions. For us as a company, the C5 certificate is another milestone on the way to making modern cloud technologies safe to use in hospitals and other medical facilities,” comments Tobias Anger, Chief Technology Officer at Telepaxx Medical Data, on the certification.

No cloud use in hospitals without a C5 certificate

The DigiG passed in May 2024 made the C5 test certificate for cloud solutions in the healthcare sector mandatory from July 2024. This point is particularly important for KRITIS facilities in view of the upcoming KRITIS audits in 2025. Due to the short implementation period, the high cost of C5 testing and the limited resources of the approved auditors, only very few providers of cloud solutions for the healthcare sector currently have the required C5 Type 1 certificate. Telepaxx is one of the first providers to meet this requirement - also because the company benefited from existing measures based on previous data protection seals.

“We are a long-standing partner of hundreds of clinics and medical practices. For these customers and as proof of our commitment to data security, we decided early on to go for certification. We are delighted to be able to offer our customers an innovative and demonstrably data protection-safe solution for the management of medical image data,” says Andreas Dobler, Managing Director at Telepaxx Medical Data GmbH.

Customers of the company can receive the C5 test report for the certified solutions as a PDF file on request. All details of the test can be transparently traced there.

Archiving and web-based image data access with C5 certificate

As part of the audit, various components of the TMD Cloud such as the vendor-neutral archive, the user portal and image viewing from the cloud were tested.

Vendor-neutral archiving from Telepaxx Medical Data is software as a service (SaaS) from the cloud, which is used to store medical image data in Telepaxx's own data centers or in the public cloud in a vendor-neutral and encrypted manner. Data from this long-term archive can be retrieved again using any standard PACS, RIS or HIS thanks to the software neutrality.

Viewing from the Cloud is an additional software component that enables doctors to access the image data in the cloud from any end device via the TMD Cloud Portal, view it and also make findings. As a type of cloud PACS, this version of the TMD Cloud is primarily used for background services and to bridge staff shortages. Radiology practices also appreciate the location-independent image retrieval from the cloud, as this makes collaboration between several locations of a practice much easier, for example.