TRUST AND SECURITY
Your record. Your audit log. Your call.
- Overlay only
- Exportable audit log
- Residency by market
Hilbi is an overlay and never becomes the system of record. Every read and write is logged, and the log is yours to export. Certifications, sub-processors and residency are named below.
ISO/IEC 27001
with ISO 27799 for health data
Art. 28 GDPR
processor under a written agreement
How the record is governed
Four statements a data protection officer can check rather than take on trust.
The record stays yours
Under Act 576/2004 Coll. and Act 372/2011 Coll. the health record is the provider's. Hilbi sits above it and never becomes it.
Every read and write is logged
The trail is immutable and yours to export. The clinician's signature is a gate before a record entry is final, not a convention.
Where the data is processed
Stated per market in the table below, because the answer differs by market and one global sentence would be wrong somewhere.
What happens if you stop
Your record never left your system. The audit log exports, patient-held data exports as a FHIR R4 bundle, retention runs on a stated clock.
Which rules apply, and where we stand
Per market. Status is stated in words as well as colour.
In force: applies today and can be evidenced. In progress: under way and dated. Readiness: the position is prepared and the market opens next.
Certification status, stated plainly
A certificate is either issued or it is not. Nothing here is rounded up.
- ISO/IEC 27001In progress
- Recertification is in progress, scoped to the group structure. No certificate number, issuing body or date is rendered on this page until the certificate is issued.
- Certification scopeIn progress
- The group structure rather than a single operating entity, so one statement covers the markets the platform runs in.
- Standards the platform is built againstIn force
- The full register (HL7 FHIR R4, ISO 27799, ISO 82304-1, ISO 13606, ISO 13485, ISO 14971, IEC 62304, MDR 2017/745, ERAS, EMRAM) is published in the standards register on this page.
- Sub-processorsIn force
- Fourteen sub-processors, each with its purpose and its processing location, listed per market in the sub-processor register.
- Penetration testing and vulnerability disclosureIn force
- Annual penetration test with quarterly vulnerability scanning. The report is available under agreement and disclosures reach the security contact published on this page.
- Data processing agreementIn force
- Available before signature rather than after, for each market's regime.
- Retention and deletionIn force
- Audit records for 10 years, clinical documents under national retention law, patient-held data until the patient deletes it. Deletion evidence is issued on request.
- Exit and portabilityIn force
- Audit log export, patient-held data as an HL7 FHIR R4 bundle, and the deletion timetable that follows.
What a data protection officer asks first
You do, and it stays in your system of record. Hilbi is an overlay and is built so that it cannot become the system of record.
Recertification is in progress, scoped to the group structure. Until the certificate is issued this page says exactly that and shows no badge, because a certification claim ahead of the certificate is the one thing an auditor will find.
Every read and write, with the actor, the time and the resource. It is immutable (Decree 98/2012 §7(1) in Czechia requires it) and it is yours to export.
No, and this page does not pretend otherwise. Slovakia and Czechia run under GDPR, India under the DPDP Act 2023, and the United States position is HIPAA readiness. The table above is stated per market for that reason.
The clinical record never left your system. The audit log is exportable, patient-held data is exported as an HL7 FHIR R4 bundle, and retention runs on a stated clock.