“MedWrite prioritise compliance with GDPR security and privacy (data protection), and AI regulations requirements. Their products are designed to meet these standards, ensuring data protection and upholding the highest ethical practices, while maintaining the trust and transparency their clients expect.” Dr. Ceara Treacy, PhD and expert in data privacy and AI regulation

At MedWrite, we fully embrace the principles of the General Data Protection Regulation (GDPR) in our software development process. Our commitment to ‘data protection by design and by default’ ensures that security and privacy are at the core of our software development. 

We accomplish this by implementing a structured framework firmly rooted in the data protection principles outlined in the GDPR and the core concepts of security and privacy by design. This framework incorporates well-established threat modelling methodologies, including STRIDE  for security and LINDDUN for privacy, ensuring the safeguarding of fourteen critical security and privacy attributes to protect personal and sensitive data. 

We systematically assess and prioritise security and privacy threats, followed by the deployment of advanced technical controls derived from globally recognised cybersecurity and security standards such as NIST 800-53r5, IEC 62443-3-3, and ISO/IEC 15408-2. Through this rigorous approach, we proactively manage risks, fortify data protection, and maintain compliance with industry-leading standards, ultimately ensuring the security and privacy of your valuable information.