Physical Security Measures
Access to the technical facilities of BetterDoc's hosting service provider is strictly controlled. Both the premises and building access areas are secured against unauthorized third parties by trained security personnel, as well as video surveillance and alarm systems.
Security Measures in Technical Infrastructure
The entire software infrastructure is continuously kept up to date (active patch management). All BetterDoc server instances are maintained in a network secured by firewalls, which is under constant monitoring by security experts. Additionally, the utilized instances are configured according to the latest OWASP security guidelines.
Security of Medical Data
All application data, configurations, and the application itself are continuously secured through the creation of backups. All data is stored in accordance with applicable OWASP security guidelines. Furthermore, all medical patient data is fully anonymized through effective separation from associated personal customer data using state-of-the-art encryption methods.
Security of Payment Data
All payment data from BetterDoc customers is processed according to PCI-compliant methods and applicable OWASP security guidelines.
Security of the Web Application
In accordance with OWASP security guidelines, the BetterDoc web application and all underlying business processes are continuously subjected to security testing.
BetterDoc Security Team
BetterDoc employs dedicated security experts responsible for ensuring the best possible security of the web application and compliance with applicable data protection regulations.
Contacting the BetterDoc Security Team
If you discover any issues regarding the security of the BetterDoc web application, we would greatly appreciate your feedback!
Please forward any information you have to security@betterdoc.org – if possible, using the public key as a signature to securely encrypt this crucial information. Also, please provide us with a secure way to communicate with you. We will get back to you within 24 hours.