deepc becomes the first Radiology AI Platform to be certified under new Information Security Standard ISO 27001:2022
- deepc’s information security processes for its radiology AI platform has met the requirements of the ISO 27001:2022 Standard, certified by a Big 4 accounting firm.
- The standard represents an evolution in information security management, emphasizing a more robust approach to risk management and incident response, while addressing emerging technologies such as cloud computing and current information security challenges in healthcare.
- The certification reflects deepc’s commitment to continually enhancing the security of its industry-leading AI operating system, deepcOS®
14th August 2024; Munich, Germany: – deepc, the leading AI platform for radiology and healthcare, today announces that it has become the first Radiology AI platform globally to achieve the ISO 27001:2022 certification for information security.
Compared to the 2013 version of ISO 27001, which is currently the more widely adopted standard in the industry, the new ISO 27001:2022 Information Security Standard marks an evolution in information security management, incorporating new standards and protocols to address today’s increasingly complex and ever-evolving cybersecurity landscape. It provides a comprehensive framework for organizations to protect sensitive data and critical systems from threats, helping to alleviate growing concerns about data breaches and ensure the continuity of critical services. Key enhancements in ISO 27001:2022 compared to previous versions include information security for cloud services, enhanced data privacy, cybersecurity threat intelligence and supply chain security.
The auditor evaluated deepc’s cloud-native infrastructure, information security measures, business continuity and disaster recovery strategies, encryption, data masking, minimal data retention, and completion of all penetration tests, as well as a multitude of other areas. Flexibly hosted either in secure cloud environments or on-premises, the certification shows that deepc’s platform meets the requirements of the ISO 27001 Standard.
The healthcare industry faces escalating cyber threats, with recent ransomware and cybersecurity incidents underscoring the critical need for robust information security measures. deepc’s ISO 27001:2022 certification therefore marks a major milestone for the company, demonstrating its industry leadership around cybersecurity, risk management, incident response, and compliance and providing reassurance for current and future customers.
Julia Moosbauer, COO and Co-founder of deepc, commented: "The rapid innovations taking place within radiology AI can only deliver benefits to clinicians and patients if they are built on a foundation of best-in-class information security. Our commitment to security has always been fundamental to deepc so we are delighted to have achieved the ISO 27001:2022 certification. This milestone not only further enhances our competitive advantage but will also further reassure healthcare providers and patients that we handle their data with the highest level of security and care."
Professor Sultan Mahmud, Director of Healthcare at BT – a prime deepc partner – commented: “As digital technology transforms healthcare services, securing patient data and critical operations is a major concern. Selecting deepc as a partner to help deliver our digital health programme in the UK means we’ve been able to offer more clinicians best-in-breed AI solutions. This latest certification assures these clinicians that their AI technology meets the highest standards for protecting sensitive patient information.”
Founded in 2019, deepc is driven by a vision to ensure precise and safe diagnostics for all patients while enabling access to health, at scale. With a proven track record of assisting AI providers in deploying their technologies in clinical settings, deepcOS, the leading AI operating system for radiologists and health systems, allows healthcare providers to harness rapid advancements in radiology AI. Today, deepc provides clinicians with effortless access to more than 70 regulatory-cleared, globally-leading AI solutions.
