Information Security Policy

Zerintia HealthTech’s Information Security Policy, approved by the Security Committee, defines the framework for ensuring the confidentiality, integrity, availability, authenticity and traceability of the information and services managed by the organization. Zerintia HealthTech adopts a preventive and comprehensive approach to security, aligned with the requirements of the National Security Scheme (ENS), CCN-STIC guidelines and the ISO/IEC 27001:2022 standard.

The company safeguards its systems through prevention, detection, response and recovery measures, including system authorization prior to commissioning, periodic security assessments, continuous monitoring, structured incident management and continuity planning based on business impact analysis. Security is a shared responsibility across all personnel and is supported by a formal governance structure that includes the Security Committee, the Security Manager, the System Manager, the Information Officer and the Service Manager, each with clearly defined roles.

This policy applies to all information systems supporting Zerintia HealthTech’s processes for designing, developing, producing and distributing medical software solutions, as well as to all internal and external personnel with access to these systems. Core principles include defined responsibility, comprehensive security, risk management, proportionality, security by default and continuous improvement. The organization ensures full compliance with the applicable legal framework, including GDPR, national data protection laws, LSSI, ENS and healthcare-sector regulations.

Zerintia HealthTech promotes continuous security awareness and training, enforces responsible use of technological resources and establishes specific coordination and compliance requirements when interacting with third parties. All systems undergo regular risk assessments and maintain updated security documentation, which is accessible only to authorized personnel.

For further information or to access the full version of the Information Security Policy, please contact us at info@zerintiahealthtech.com.