Security & Compliance

Healthcare-grade security by design

PuzzleSoft is engineered for the most sensitive data on the planet — medical records — and certified to the standards healthcare leaders trust.

ISO 27001 ISO 27799 ISO 9001

Encrypted medical data

End-to-end encryption in transit and at rest across all PuzzleSoft systems.

Secure APIs

Hardened FHIR APIs with Fortinet protection, secured VPN and audit logging.

Role-based permissions

Granular RBAC, consent management and clinician-level access controls.

Secure interoperability

Patient-controlled sharing and AI validation before any external exchange.