Security for sensitive data
You handle sensitive health data about your customers and patients. We take that responsibility seriously.
- GDPR
- EU Data Protection Regulation
- SSL/TLS
- Encrypted transmission
How we protect your and your customers' data
Health declarations, medical notes, and personal data — everything is handled with the highest security.
- GDPR-compliant for healthcare
- We follow GDPR and the specific requirements for health and medical data. Your patients' information is processed according to applicable regulations.
- Data within the EU
- All patient data and health declarations are stored with certified cloud providers within the EU. No uncertainty about where sensitive information ends up.
- Strong encryption
- Encrypted in transit everywhere, encrypted disks at the hosting provider, and personal identity numbers encrypted at field level in the database. Access to health forms is role-based and logged.
- Access control
- Each customer only sees their own data. Your staff gets role-based access so the right person sees the right information.
- Backup
- Regular backups of all patient data ensure nothing is lost if something unexpected happens.
- Continuous monitoring
- We monitor the system around the clock and act quickly on deviations. Logging of all access for traceability.
Secure separation between your customers
Each customer has its own isolated environment in Portway. Data can never leak between customers — you can safely manage several customers and contracts in the same system.
Your customers
24 people
Isolated data
Your customers
112 people
Isolated data
Your customers
8 people
Isolated data
No data shared between customers
- Strict data isolation per customer
- Separate permissions and user groups
- Customer-specific portals with own branding
- Complete logging of all access
Need more details?
If your IT department or data protection officer needs more information for security review, contact us and we'll send relevant documentation.
- Complete security documentation
- Data Processing Agreement (DPA)
- Technical architecture description
- Incident handling procedures