Certified
ISO 27001:2022
Certified by IQCS for the design, development, operation and support of our software and services.
Trust Center
Security your compliance team can check
We build software that moves patient data between EHRs, payers and apps. Here is how we protect it, and the documents your security review needs.
- ISO 27001:2022
- HIPAA
- GDPR
- Cyber insurance
- SOC 2 Type II
Status today
ISO 27001:2022Certified
HIPAACompliant
GDPRCompliant
Cyber insuranceIn place
SOC 2 Type IIIn progress
Compliance
Frameworks we meet
Compliant
HIPAA
Safeguards for protected health information. We sign Business Associate Agreements (BAAs).
Compliant
GDPR
We process personal data of people in the EU lawfully and sign Data Processing Agreements.
In place
Cyber insurance
We carry cyber liability insurance. Proof of cover is shared on request.
In progress
SOC 2 Type II
Audit preparation is under way. We will publish the report here once the auditor issues it.
Certificate
ISO 27001:2022 certificate
- Certified company
- Elintex Technologies Pvt Ltd (Nirmitee.io)
- Registration number
- 91/I/9145
- Certification body
- IQCS Certifications Pvt Ltd
- Accreditation
- ASCB (Europe)
- Issued
- 17 February 2026
- Next surveillance audit
- 16 February 2027
Documents
Reports and agreements
Controls
What we check
Pick an area to see its controls.
- Encryption at restDatabases and backups are encrypted.
- Encryption in transitTLS on every connection that carries data.
- Minimum necessary PHIProjects use only the patient data the workflow needs.
Found a security issue?
Write to hello@nirmitee.io and we will respond quickly.