Regulatory Compliance

Medical Device Compliance

Completed

Since 2018, we have been offering our renowned medical-grade products. Our latest software, the Medical Guidance Platform (MGP), together with its modules—Triage, Intake, Call Center Triage, and Follow-up—is certified as a Class IIb medical device under the EU MDR.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Al Act

In progress

As AI-powered medical devices, Infermedica’s products are classified as high-risk systems under the EU AI Act. Most of the requirements are already fulfilled through our MDR compliance framework. As the enforcement guidelines continue to evolve, we closely monitor regulatory developments and stand ready to adapt whenever necessary.

Medical Device Compliance

Completed

Infermedica’s software operates under FDA enforcement discretion due to its clear Intended Use: guiding users via symptom questionnaires to recommend appropriate care settings. This ensures compliance with best practices in safety, usability, and transparency, without requiring FDA clearance.

SOC 2

Completed

Our systems are designed with robust data protection measures, ensuring compliance with industry standards. We adhere to SOC 2 security principles, implementing strict access controls, encryption, and continuous monitoring to safeguard sensitive information.

HIPAA

Completed

Infermedica designs its healthcare solutions with robust security—encryption, access controls, and audit logs—to safeguard Protected Health Information. By complying with HIPAA, we ensure our AI-powered tools uphold top standards for privacy, security, and confidentiality.

Medical Device Compliance

In progress

Infermedica is actively assessing TGA regulatory pathways and potential registration routes. For now, clients must handle TGA registration. Once we obtain EU MDR certification, we’ll apply for MGP registration in Australia, with plans to start this process in late 2025.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Medical Device Compliance

Completed

Infermedica has registered its medical device, Triage and Intake, in Brazil and ensures compliance with ANVISA regulation via a local authorized representative. This partnership guarantees our AI healthcare solutions meet Brazilian regulations to be legally available in the market.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Data Protection

Completed

Brazil’s General Data Protection Law (LGPD), modeled on the EU’s GDPR, regulates personal data collection, processing, storage and use. Infermedica complies fully with GDPR, applying strong data protection measures to safeguard privacy and ensure top standards of security and transparency.

Medical Device Compliance

Completed

Infermedica’s products meet UK medical software regulations. During the transition, MDD-certified solutions can be marketed under UKCA. Once we obtain EU MDR certification, we’ll apply for UKCA registration in the UK based on that certificate.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

GDPR

Completed

The UK upholds GDPR principles with changes via the Data Protection Act 2018. Infermedica fully complies with GDPR, using strong data protection measures to protect user privacy and uphold top standards of security and transparency.

Medical Device Compliance

Completed

Infermedica’s products meet Swiss medical software regulations. As Switzerland recognizes EU MDR compliance, our solutions can be marketed there. We’ve registered our modules, monitor local regulations, and work with local Authorized Representatives to ensure ongoing compliance.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Data protection

Completed

The revised Swiss data protection law aligns with GDPR, ensuring the free flow of data between the EU and Switzerland. Infermedica is fully compliant with GDPR, adhering to the highest standards of data protection and privacy.