Security, Privacy & Compliance
Healthcare-grade security & privacy by design
PuzzleSoft is engineered for the most sensitive data on the planet — medical records — and certified to the standards healthcare and EU regulators trust.
ISO 27001 ISO 27799 ISO 9001 GDPR-aligned EHDS-ready CE marking
Encrypted medical data
End-to-end encryption in transit and at rest across all PuzzleSoft systems.
Secure APIs
Hardened FHIR APIs with Fortinet protection, secured VPN and audit logging.
Role-based permissions
Granular RBAC, consent management and clinician-level access controls.
Secure interoperability
Patient-controlled sharing and AI validation before any external exchange.
Privacy by design (GDPR)
Data minimization, lawful processing, data subject rights and breach response — built in, not bolted on.
European readiness
Architected for EHDS, GDPR, NIS2 and Medical Device Regulation (MDR) requirements relevant to digital health in the EU.