Cloud Computing for Healtchcare

Compliant with the Swiss Data Protection Act (DSG)

Safe Swiss Cloud is compliant with the new Swiss Data Protection Act (DPA), which will come into force in September 2023. In particular, the law strengthens the data subjects’ self-determination over their own data – by obliging data controllers to increase transparency and extending the rights of data subjects.

Compliant with EU GDPR

Safe Swiss Cloud is compliant with the DSGVO (General Data Protection Regulation). The General Data Protection Regulation is a European Union regulation that standardises the rules for processing personal data – both private and public – across the EU.

HIPAA compliant

Safe Swiss Cloud is HIPAA compliant. The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for protecting sensitive patient data. Healthcare organisations that deal with protected health information (PHI) must have and follow physical, network and process security measures in place to ensure HIPAA compliance.

Certified according to ISO 27001 including the standards ISO 27017 and ISO 27018

Safe Swiss Cloud is certified according to ISO 27001 including the standards ISO 27017 and ISO 27018: ISO/IEC 27001: 2013 specifies the requirements for establishing, implementing, maintaining and continuously improving the information security management system in an organisation.

ISO 27017: provides guidance on the information security aspects of cloud computing, recommends and supports the implementation of cloud-specific information security controls that complement the guidance in ISO/IEC 27002 and other ISO27k standards.

ISO/IEC 27018: 2014 defines generally accepted control objectives, controls and guidelines for implementation measures to ensure personal data in accordance with the privacy principles of ISO/IEC 29100 for public cloud computing environments.