OPAN® is certified to ISO/IEC 27001
News
OPAN® is certified to ISO/IEC 27001
Independent confirmation of what has been established practice for years
OPAN CARE AG is certified to ISO/IEC 27001, the internationally recognised standard for information security. The certification was carried out by Attesta AG in September 2026.
For OPAN, data protection and information security are not new topics. For years, hospitals, clinics, medical practices and social services have used the platform to transmit patient data to home care (Spitex) organisations, nursing homes, rehabilitation clinics and other follow-up care institutions. Protecting this data has been the foundation of OPAN from the very beginning. The certificate now confirms, independently and against a recognised standard, that our processes meet this requirement.
Sensitive data in everyday care
Every day, applications between referrers and providers run through OPAN. They contain sensitive information, such as personal details, discharge summaries, nursing reports, diagnoses or information on care needs. Anyone who shares such data must be able to rely on it being protected and seen only by authorised parties.
We have carried this responsibility since the platform was launched. Protective measures such as encrypted transmission and data storage in Switzerland were therefore already an integral part of operations before certification.
What certification adds
ISO/IEC 27001 does not only assess individual technical measures, but above all the management system behind them: how risks are identified, assessed and treated, how responsibilities are assigned and how measures are reviewed regularly. With our information security management system (ISMS), we have systematically documented existing processes and brought them into a consistent framework.
In workshops with our team and executive management, we set security objectives, analysed risks in a structured way and clearly assigned responsibilities. As a result, everyone involved can now see which information we protect, how we protect it and who is responsible for what.
What the certificate means for you
For you as a user of OPAN, this means that the handling of patient data follows defined rules that have been reviewed by an independent body. Data is processed and stored in Switzerland. Only authorised persons have access, according to their role.
For organisations that have to meet their own data protection requirements, the certificate provides a clear basis for contract reviews and security assessments.
What comes next
Information security remains an ongoing process. Our ISMS is reviewed annually in surveillance audits and recertified after three years. In between, we continue to develop our controls.
We would like to thank all organisations that use OPAN every day and entrust us with their data. We see this trust as a commitment.
Do you have questions about OPAN®?
Please get in touch via the contact form on our website or by email at servicedesk@opancare.ch