Protecting the data that our customers have entrusted to us has been a top priority for us from day one. We believe it is important for our customers to know some of the general steps we take to protect their data.

Data Center Security:

• All data is always stored exclusively within Switzerland on openmedical's servers.
• We have multi-level backup processes in place to minimize data loss in the event of an attack or system failure.
• All backups are encrypted and stored at secure cloud locations within Switzerland.
• All traffic to and from our data servers is handled over HTTPS and is therefore encrypted.

Application-level security:

• We regularly conduct security penetration tests performed by various certified vendors. The tests include high-level penetration testing for the server and in-depth testing for vulnerabilities within the application. The current certificates can be viewed here.
• Wherever possible, we minimize the amount of personal data we collect from our customers' users.
• Where possible, we rely on proven open source software to avoid the risk of malware.

Internal IT security:

• We protect every computer in use at openmedical with a secure password and, where possible, with additional security measures.
• Every employee undergoes security training to understand the importance of protecting customer data.
• We require the latest versions of anti-virus and firewall software on all computers used by the openmedical team to access customer data.