Regulatory Compliance

Medical Device Compliance

Completed

Since 2018, we have offered our renowned products, Infermedica Triage and Infermedica Intake, as Class I EU MDD. Our newest product, Medical Guidance Platform (MGP), is currently in the process of certification to MDR Class II b.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Al Act

In progress

As AI-powered medical devices, Infermedica’s products fall under the EU AI Act as high-risk systems. Thankfully, most requirements are already met through MDR preparations. With enforcement guidelines still evolving, we actively monitor updates and are ready to adapt as needed.

Medical Device Compliance

Completed

Infermedica’s software operates under FDA enforcement discretion due to its clear Intended Use: guiding users via symptom questionnaires to recommend appropriate care settings. This ensures compliance with best practices in safety, usability, and transparency, without requiring FDA clearance.

SOC 2

Completed

Our systems are designed with robust data protection measures, ensuring compliance with industry standards. We adhere to SOC 2 security principles, implementing strict access controls, encryption, and continuous monitoring to safeguard sensitive information.

HIPAA

Completed

Infermedica designs its healthcare solutions with robust security—encryption, access controls, and audit logs—to safeguard Protected Health Information. By complying with HIPAA, we ensure our AI-powered tools uphold top standards for privacy, security, and confidentiality.

Medical Device Compliance

In progress

Infermedica is actively assessing TGA regulatory pathways and potential registration routes. For now, clients must handle TGA registration. Once we obtain EU MDR certification, we’ll apply for MGP registration in Australia, with plans to start this process in late 2025.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Medical Device Compliance

Completed

Infermedica has registered its medical device, Triage and Intake, in Brazil and ensures compliance with ANVISA regulation via a local authorized representative. This partnership guarantees our AI healthcare solutions meet Brazilian regulations to be legally available in the market.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Data Protection

Completed

Brazil’s General Data Protection Law (LGPD), modeled on the EU’s GDPR, regulates personal data collection, processing, storage and use. Infermedica complies fully with GDPR, applying strong data protection measures to safeguard privacy and ensure top standards of security and transparency.

Medical Device Compliance

Completed

Infermedica’s products meet UK medical software regulations. During the transition, MDD-certified solutions can be marketed under UKCA. Once we obtain EU MDR certification, we’ll apply for UKCA registration in the UK based on that certificate.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

GDPR

Completed

The UK upholds GDPR principles with changes via the Data Protection Act 2018. Infermedica fully complies with GDPR, using strong data protection measures to protect user privacy and uphold top standards of security and transparency.

Medical Device Compliance

Completed

Infermedica’s products meet Swiss medical software regulations. As Switzerland recognizes EU MDR compliance, our solutions can be marketed there. We’ve registered our modules, monitor local regulations, and work with local Authorized Representatives to ensure ongoing compliance.

Security ISO 27001

Completed

We offer proven systems compliant with industry standards, featuring robust security measures and ongoing oversight through regular penetration testing.

Data protection

Completed

The revised Swiss data protection law aligns with GDPR, ensuring the free flow of data between the EU and Switzerland. Infermedica is fully compliant with GDPR, adhering to the highest standards of data protection and privacy.