Security & privacy

Ensuring privacy and leveraging reliable, trusted security in the cloud

navify Decision Support portfolio secures patient data while making it easy to share information among your institution’s care teams, no matter where they are.

Security & privacy

Ensuring privacy and leveraging reliable, trusted security in the cloud

navify Decision Support portfolio secures patient data while making it easy to share information among your institution’s care teams, no matter where they are.

Designed to keep data accessible and safe

navify portfolio is a suite of cloud-based Software as a Service solutions designed to keep sensitive patient data safe while making it accessible to healthcare providers and specialists.

navify portfolio architecture also ensures each customer’s data is segregated from that of other institutions. Only affiliated users can view patient data associated with a specific hospital.

To accomplish this, we use:

  • Amazon Web Services (AWS) secure infrastructure services (compute, storage, database and networking)
  • navify Platform services such as security scanning, patching, logging and monitoring

Purpose-built to meet evolving healthcare needs

navify portfolio is a secure, compliant set of cloud-based solutions. To enable healthcare teams with the right data at the right time, navify portfolio safely accesses a variety of sources for information, such as:

  • Patient demographics from electronic medical records
  • Clinical data and notes, including cancer data
  • Radiology images and reports from picture archiving communication systems
  • Pathology images and reports
  • Laboratory results

Secure and reliable

We track the flow of data in transit and in storage in the cloud, provide safeguards at every stage of the data’s lifecycle, and map policies, procedures and technical measures to regulations for each geography.

Here’s how navify portfolio delivers the key functions and features important to healthcare IT professionals:

  • AWS and navify Platform automate multiple levels of security and monitoring.
  • Changing data privacy needs and requirements for data storage locations trigger adaptations that uphold the rights of data subjects.
  • Customers expend little to no overhead in implementation of easy-to-deploy, scalable features.
  • Robust resiliency and disaster recovery capabilities ensure reliability and uptime.

navify Platform is designed for data privacy and security against internal and external bad actors and any associated attack vectors. Our architecture uses encryption of data at rest and data in transit, as well as two-factor authentication, automated cloud instance provisioning, authorization and multi-tenancy.

navify portfolio products and the data they aggregate from your institution’s IT environment are protected at multiple layers.

Hands on a keyboard with translucent icons indicating security and privacy

Aggregated data protections:

  • Encryption algorithm
  • Encryption keys
  • Network
  • Detection and response
  • Organization
Hands on a keyboard with a lock icon indicating security and privacy

Data encryption & access control:

  • Encryption of data in transit and at rest
  • Access control list (ACL)
  • Monitoring and logging
  • Backup and recovery
Image of servers at a secure data center

Network & infrastructure security:

  • Infrastructure security
  • Vulnerability management
  • Patching
  • Network security
Close up of a women with headphones on a call

Human factors & accountability:

  • Incident management
  • Software development lifecycle and design control
  • Administrative policies
  • Certification and compliance programs

Accountability to data security standards

Roche has ISO 27001 certification for our information security management system and ISO 27017 and 27018 certification for cloud hosting and personally identifiable information management in the cloud.

Roche assesses each country’s unique regulatory requirements before introducing a new product.

Explore
more

navify Decision Support portfolio data privacy and security

Read more

Security and privacy compliance lifecycle for digital product development

View infographic