Data encryption
All communication and data are protected by encryption in transit and at rest.
The first Croatian certified communication system for healthcare
A platform built according to the highest security standards for protecting sensitive health data.
sDoctor is the first certified communication platform in Croatia developed specifically for healthcare, based on security, privacy and data protection. It is developed for healthcare institutions that need reliable, secure and controlled communication with patients, helping reduce communication chaos and ensuring safe exchange of information and content between patients and healthcare professionals.
4.8
Google Play
How we protect data
System security is based on a multi-layered approach to protecting data and infrastructure.
Access control
Data access is available only to authorized persons under the principle of least privilege.
Multi-factor authentication (MFA)
Administrative access is additionally protected by a security authentication layer.
Audit logs and monitoring
All access and activity in the system is logged and monitored.
Security backups
Regular backups ensure continuity of operation and protection against data loss.
System segmentation
The system is architecturally segmented to minimize security risk.
Data security
Data remains in the Republic of Croatia
All data in the sDoctor system is processed and stored exclusively in the Republic of Croatia, within the European Union.
Infrastructure in Croatia
All systems are located in the Republic of Croatia.
No transfer outside the EU
Data is not transferred to third countries.
Own data center
Data is processed and stored on our own infrastructure and servers.
Reliable compliance and standards
The data development, management and protection system is based on relevant regulatory requirements and international security standards, with continuous risk management and improvement of security measures.
GDPR compliant
We comply with the General Data Protection Regulation (GDPR) and protect user privacy.
HIPAA compliant
The system implements security and organizational measures comparable to HIPAA requirements.
CCPA compliant
We apply data protection principles aligned with international privacy standards.
SOC 2
A report describing internal controls relevant to the security, availability and confidentiality of user data.
ISO/IEC 27001
The information security management system is certified according to the ISO 27001 standard.
ISO 9001
The quality management system is certified according to the ISO 9001 standard.
