Buddy Healthcare is proud to announce the successful renewal of its ISO/IEC 27001:2022 certification.
ISO/IEC 27001:2022 is the internationally recognised standard for Information Security Management Systems (ISMS). The certification demonstrates that Buddy Healthcare maintains a risk-based approach to information security and continues to meet internationally recognised requirements for managing and protecting information.
As a healthcare technology provider, safeguarding sensitive information is a core part of our operations. Maintaining ISO 27001:2022 certification supports our work with healthcare organisations and our mission to deliver secure digital care coordination solutions while ensuring the confidentiality, integrity, and availability of information.
"Maintaining our ISO 27001:2022 certification highlights Buddy Healthcare's proactive approach to information security. Over the past few weeks, we collaborated closely across departments to further refine our security policies and align them with our evolving operational workflows. This successful re-certification is a true team effort, reflecting how we continuously mature our security practices to deliver the highest standards of trust for our partners." – Sorin Patrasoiu, Security Lead, Buddy Healthcare
"ISO/IEC 27001:2022 is a critical component of our broader commitment to quality, regulatory compliance, and customer trust. Together with our MDR Class IIa certification, ISO 13485:2016, and other recognised frameworks, it demonstrates our ongoing investment in secure, reliable, and compliant digital healthcare solutions." - Jarmo Takkunen, Quality and Regulatory Affairs, Buddy Healthcare
In addition to ISO 27001:2022, Buddy Healthcare maintains a comprehensive compliance and quality framework that includes MDR Class IIa certification, ISO 13485:2016, the NHS Data Security and Protection Toolkit (DSP Toolkit), WCAG 2.2 accessibility standards, and ORCHA OBR assessment requirements.
Read more about our compliance and certifications.