Sophia Genetics: ISO certifications for information security and privacy protection

SOPHiA GENETICS (Nasdaq: SOPH), a cloud-native healthcare technology company and a global leader in data-driven medicine, today announced it has successfully achieved ISO/IEC 27017:2015 and ISO/IEC 27018:2019 certifications for information security and privacy protection in its cloud services from BSI, the business improvement and standards company. It has also achieved recertification to ISO/IEC 27001:2022. The Company first achieved its ISO/IEC 27001 certification in 2014, demonstrating a robust information security management system was implemented to handle customer data securely.

These internationally recognized standards, developed and published by the world’s most recognized standards organization for information security management systems, underscore the Company’s commitment to maintaining the highest standards of security and data protection for its customers and the patients they serve.

SOPHiA GENETICS has consistently prioritized the security of customer data and privacy of the patients they serve for over a decade, ensuring the highest level of data security for the 780 healthcare institutions it serves globally.

By achieving two new certifications, SOPHiA GENETICS further solidifies its commitment to protecting the data of its customers and complying with global data protection regulations. The certifications highlight the Company’s commitment to proactively aligning with the evolving cybersecurity landscape. In addition, customers can be reassured by SOPHiA GENETICS’ role in establishing privacy, transparency, and regulatory compliance as top priorities that are consistently held to the highest standard.

“We are raising the bar for how cloud-based health data should be managed and protected,” said Daan van Well, Chief Legal and Regulatory Officer of SOPHiA GENETICS. “These certifications showcase our dual commitment: implementing best practices in collaboration with our partners and offering secure, trustworthy services to our customers at the same time. This achievement reinforces our longstanding commitment to data protection and cloud security and further solidify our position as leaders in cloud security and data privacy in the health data space.”

ISO standards are widely recognized internationally as the gold standard to ensure the security of the broader public. To demonstrate the quality of its focus on advanced security standards, SOPHiA GENETICS underwent a rigorous evaluation from BSI (British Standards Institution), a third-party auditor, to obtain the ISO certificates.

David Mudd, Global Head of Digital Trust, Assurance at BSI said: “Digital healthcare offers an immeasurable opportunity for society, but to truly unlock the potential of this, patients and clinicians need to be able to trust the technology is safe, secure and reliable. Achieving these certifications from BSI demonstrates SOPHiA GENETICS’ commitment to its customers to deliver reliable and accurate insights while ensuring any data processed by its technology is secure. Their customers and stakeholders can have the confidence that they are working with an organization dedicated to the highest standards and level of care when it comes to information security and data privacy in the cloud.”