Skip to content
RAYNIVA Health Solutions

Security & compliance

Our commitment to data security & compliance.

Our security and compliance programme is being developed to support responsible healthcare operations, with input from external specialists.

In detail

Where each area stands today.

  • UK GDPR compliance programme

    Policies and processes for handling personal data under UK data protection law.

    In progress

  • HIPAA readiness programme

    Preparing safeguards and agreements needed to work with US protected health information.

    In progress

  • Security policies and risk assessment

    Written security policies and an assessment of information security risks.

    In progress

  • ISO 27001 readiness

    Preparation towards the ISO 27001 information security standard.

    Planned

  • MFA and identity access controls

    Multi-factor authentication and controlled access for every account. Implementation pending.

    Planned

  • Managed devices and endpoint protection

    Company-managed devices with endpoint protection.

    Planned

  • Device encryption and access restrictions

    Encrypted devices with restricted access.

    Planned

  • Secure remote access and audit logging

    Controlled remote access to client systems, with activity logged.

    Planned

How to read this page

What the labels mean.

Planned
Agreed as a future step; work has not started.
In progress
Actively being developed or put in place.
Implemented
In place and operating.
Independently certified
Verified by an external body, with documentary evidence.

Before any patient data

Service onboarding is subject to the required privacy, security and contractual arrangements. We do not access live patient information until those are in place and approved by the practice.

Independent certification

No independent certification has been obtained. We do not hold HIPAA, UK GDPR or ISO 27001 certification. Certificates will be added here only once issued.

Questions about security?

Talk to us about how we handle information.

Book a discovery call

No patient or medical information needed to start a conversation.