searches
Protecting your data is our priority
The security of your data is our top priority at xatlaMed. Our practice software is operated as a web application, and we use the latest security measures to ensure the protection of this sensitive data.
Secure access
TLS encryption, MFA authentication, and a front-end Web Application Firewall protect every instance of access to your patient data. Attacks are neutralized before they can reach our systems.
Transparent access rights
Our flexible role system gives you full control over your employees' access rights so that everyone can only access the data they really need.
Compliance and data storage
Your data is stored in a geo-redundant configuration across two ISO 27001-certified Swiss data centers. This ensures full compliance with the Swiss Federal Act on Data Protection (FADP) requirements for particularly sensitive data.
Data security at xatlaMed – Your trust in safe hands
In an era where data security plays a critical role, we provide a comprehensive security package that makes no compromises. Here are the key security features we offer you.
Your data belongs to you
Our customers retain sole ownership of their data and can export it in full at any time. We do not use it for any other purposes; there is no vendor lock-in.
Encrypted storage
Sensitive patient data and all documents stored in our data repository are secured with state-of-the-art encryption to ensure maximum protection.
Traceability through logging
Every creation or modification of data is documented. This transparency is essential for data security and effective teamwork.
High system availability
We guarantee 99.9% annual system availability. Clustered servers compensate for the failure of individual components, ensuring your practice can operate without interruption.
Swiss data centers
Two data centers in Rümlang ZH and Lupfig AG: ISO 27001 certified, FINMA-compliant, ISAE 3402 audited, featuring guarded security zones and redundant power supply.
Defense against attacks
A web application firewall with BSI-qualified DDoS protection filters attacks before they reach our systems. Operated in Europe, independent of US clouds.
Frequently Asked Questions (FAQ)
In our FAQ, you will find answers to the most common questions about xatlaMed.
How is system availability ensured at xatlaMed?
Our practice software runs on clustered servers: if one component fails, the others take over. Add two geo-redundant Swiss data centers and regular maintenance, and we achieve a guaranteed system availability of 99.9% per year.
What measures do we take to prevent data loss?
We perform regular, automated backups. These are stored in an encrypted format and additionally transmitted to a second Swiss data center in a different region—georedundant between Rümlang ZH and Lupfig AG. In the event of an incident, your data can be restored quickly and reliably.
How does the traceability of changes work in the practice software?
Our software logs every change made to data records. You can track who created or edited specific data at any time. This traceability not only provides additional security but also facilitates team collaboration.
How long is my data stored on the servers?
Your data is stored for as long as you use our services. You can export it yourself at any time: table data as an Excel or CSV file, and the data repository as a ZIP archive. Please back up your data before your contract ends, as we will permanently delete it from our servers thereafter.
Where is my patient data stored?
Exclusively in Switzerland, in two data centers located in Rümlang (ZH) and Lupfig (AG). Both are ISO 27001 certified, FINMA-compliant, and ISAE 3402 audited, featuring redundant power supplies, multi-level security zones, and a 24/7 security control center.
How does xatlaMed protect itself against cyberattacks?
The system is protected by a web application firewall with qualified DDoS protection provided by our partner, Myra Security. It filters out attacks such as SQL injection or denial-of-service attempts before they reach our systems. Myra is BSI C5 Type 2 certified and meets all 37 criteria of the German BSI. Your data continues to be stored exclusively in Switzerland.
Does xatlaMed meet the requirements of the revised Data Protection Act?
Yes. Under the revised Swiss Data Protection Act (revFADP), patient data is classified as particularly sensitive personal data. We store it exclusively in Switzerland, encrypt it during transmission and storage, log every access, and manage permissions via a role-based system. We provide you with a data processing agreement, including technical and organizational measures (TOM).
Try xatlaMed for free or request an individual offer
Sign up for a 30-day free trial account or request a quote. Non-binding and without commitment — see the benefits of xatlaMed for yourself.