Security you can trust

JodaCare is built with security at the core. We take privacy and data protection seriously.

Security

How we protect your data

JodaCare is designed to safeguard security and privacy for patients, relatives and staff.

Man sitting by a window in evening light

ID-porten sign-in

Security level substantial

You sign in with ID-porten. Staff can also sign in with a work account. Sign in with MinID, BankID, Buypass or Commfides through ID-porten. JodaCare requires security level substantial.

GDPR compliant

JodaCare is developed in line with the GDPR and the Norwegian Personal Data Act, with procedures for data processing, access and deletion.

Data processing agreement

Data processing agreements are in place or being signed with all third parties that process personal data, and every municipal customer is offered a DPA at onboarding.

Data stored in Europe

EU storage

The database and services run in Stockholm. The AI features that are coming will use Mistral in Paris.

Access log

Coming

A log of who has viewed the content.

Shared only within the team

Only the team around the service recipient can see the content. The service location manager decides who is in the team.

Privacy in AI processing

Coming

Before text is sent to AI, JodaCare will remove names, addresses, dates of birth, diagnoses and place names.

Secure file storage

Images and files are stored in private storage and can only be accessed through signed URLs that expire after 24 hours.

Additional safeguards

Encrypted communication

All communication between your device and JodaCare is encrypted with TLS 1.3.

Access control

Fine-grained access control ensures users only see information they are entitled to.

Regular security testing

We carry out regular internal security reviews and code audits of the platform.

Law and compliance

Norwegian Health Personnel Act

JodaCare is built to support collaboration between health professionals, relatives and partners. Only the team around the service recipient can see the content. The service location manager decides who is in the team.

Personal Data Act and GDPR

We process personal data in line with the Personal Data Act and the EU GDPR, including consent, access, rectification and deletion procedures.

Patients' and users' rights

JodaCare respects the right to information and participation. The design strengthens the ability of patients and relatives to take part in decisions about health and care.

Since 2016

JodaCare in Norwegian municipalities

Norwegian municipalities

Customers

Substantial

Security level

Data location

Questions about security?

We are happy to explain in more detail how JodaCare works and how your data is protected.