Trust Center - AAA FabSup Test

Compliance

Overview

This is Fabiani's company.

Mostly used to test out new features.

We are a leading digital health company transforming patient care through innovative cloud platforms, telemedicine, and AI-driven solutions.

By empowering healthcare professionals with real-time insights, we improve clinical outcomes and efficiency. Built on strict regulatory compliance and privacy-by-design, our secure ecosystem ensures absolute data protection, making healthcare more accessible and patient-centered.

contact me at: link

Compliance Controls

Confidentiality or non-disclosure agreements

Legally binding confidentiality or non-disclosure agreements (NDAs) are systematically utilized to ensure personnel, vendors, and clients protect sensitive information from unauthorized disclosure.

Return of assets

Formal procedures are established to ensure all employees, contractors, and external parties return all corporate hardware, software, and data upon termination of employment or contract.

Security of assets off-premises

Security protocols and configurations are enforced to protect corporate hardware and information assets when used, transported, or stored outside the organization's primary physical boundaries.

Responsibilities after termination or change of employment

Security duties, non-disclosure obligations, and legal responsibilities that remain valid after an individual's role changes or employment ends are clearly defined and enforced.

Operation planning and control

Operational processes and IT activities are systematically planned, documented, and monitored to ensure the secure, consistent, and predictable delivery of corporate services.

Protecting against physical and environmental threats

Measures such as fire suppression, backup power supplies, and climate controls are implemented to defend corporate facilities against natural disasters or environmental failures.

Equipment siting and protection

Critical hardware and IT infrastructure are positioned strategically within facilities to minimize environmental hazards, reduce visibility, and mitigate the risk of physical tampering.

Network management

Procedures and technologies are established to securely configure, monitor, and manage corporate networks, protecting them from unauthorized traffic and external threats.

Authentication management

Robust policies and identity verification mechanisms are implemented to validate the identity of users and systems attempting to access organizational resources.

Application access rights and login

Granular, role-based access controls and secure login interfaces restrict user privileges within applications to the minimum required for their business functions.

Data pseudonymisation

Techniques are applied to process personal data so that it can no longer be attributed to a specific individual without the use of separate, securely stored information.

Log management

Formal processes are established for the secure retention, regular analysis, and protection of system logs against unauthorized tampering or premature deletion.

Lawfulness of the Processing

Processes are established to ensure that all data operations are based on valid legal grounds, protecting individual rights and complying with relevant regulatory principles.

Personnel designations

Clear roles, responsibilities, and accountability for data protection and information security are formally assigned and communicated across the organization.

Data Protection Officer (DPO)

A qualified individual or function is appointed to oversee the data protection compliance strategy, provide independent guidance, and act as a regulatory contact point.

Data Minimisation

Practices and systems are designed to limit the collection, access, and retention of information to only what is strictly necessary for the specified and intended purpose.

Cookies Management

Mechanisms are implemented to govern the deployment of website cookies and tracking technologies, ensuring transparent user granular control over privacy preferences.