Security
Security designed for the care sector
Controls aligned with ENS Medium category, AES-256-GCM encryption and data on European infrastructure.
OmiCare incorporates security measures from design and is working towards ENS Medium category alignment.
- alignment in progress
- ENS MED
- encryption at rest
- AES-256-GCM
- communications
- TLS
- infrastructure
- EU
Compliance framework
- ENS — Medium category alignment in progress
- Controls aligned with ISO 27001 (no certification claimed)
- GDPR / UK GDPR — personal data protection
- eIDAS Regulation for advanced electronic signatures
- WCAG 2.2 AA — web accessibility
Technical measures
- AES-256-GCM encryption for sensitive data at rest
- Communications protected with TLS
- Detailed logging of actions and access by user
- Granular access control with roles and permissions
- Strong authentication for privileged profiles
- Documented incident management plan
- Encrypted backups with restoration procedures
- Periodic security and dependency reviews
Data in the European Union
Production infrastructure is deployed in European Google Cloud regions. We assess and document subprocessors under applicable data protection law.
Preguntas frecuentes
Where is data hosted?
On cloud infrastructure in the European Union (europe-southwest1 region). We share the subprocessor chain in the data processing agreement.
Is OmiCare ENS certified?
OmiCare is built with controls aligned with ENS and is working towards Medium category alignment. We do not claim ENS certification until the process is complete.
Who can view a resident's clinical data?
Only authorised professionals according to their role. Every query and change is logged for traceability and audit.
Book a personalised demo
Session of approximately 45 minutes. We review your facility's needs and answer functional, technical and security questions.
- Walkthrough of your priority processes
- Demonstration with relevant use cases
- Identification of efficiency and improvement opportunities
- Indicative scope for implementation, migration and integrations
- Q&A session with a product specialist