deepc Attains C5 Attestation, Setting New Standards for Secure AI in Healthcare

• Compliance with the German Government-backed C5 attestation scheme validates deepcOS's robust controls against cyber threats
• Germany sets a new standard with its new Digital Law DigiG by requiring C5 compliance for cloud services handling patient data
• The ongoing expansion of the deepcOS® Governance and Compliance Framework strengthens trust, transparency, and resilience, setting a global benchmark for healthcare AI operations

18th December 2024; Munich, Germany: – deepc, a leader in AI platform solutions for healthcare, proudly announces the attainment of its C5  (Cloud Computing Compliance Criteria Catalogue) type 1 attestation set by Germany’s Federal Office for Information Security (BSI). This achievement positions deepcOS, the company’s flagship AI platform, as a trusted and compliant solution for the healthcare industry meeting the requirements of the new Digital Law (DigiG).

“Attaining the C5 attestation reaffirms our commitment to providing secure, scalable, and innovative solutions for healthcare providers and AI vendors,” said Dr. Franz Pfister, CEO of deepc. “With deepcOS, every hosted AI product operates under our comprehensive compliance framework, eliminating the need for vendors to independently manage complex security requirements.”

C5 compliance is mandated by the new DigiG to meet Germany’s strict IT and cloud security standards, including requirements for communication security, encryption, and secure software development. Contrary to common misconceptions, achieving C5 compliance goes beyond being hosted on C5-compliant cloud infrastructure providers like AWS or Microsoft Azure. The majority of compliance responsibilities lie with the SaaS AI platform provider, making deepc’s achievement a significant milestone for AI in healthcare.