Back
Security & Privacy

Patients trust you with their most personal photos. evooia protects that trust from the very beginning.

Before-and-after images are highly sensitive. They do not belong in private photo galleries, shared albums, or unsecured cloud accounts. That is why evooia follows one simple principle: every photo remains protected at all times.

01

Patient photos get their own private cloud.

evooia stores every image in a private, encrypted environment in Microsoft Azure’s Swiss data centres, the same infrastructure hospitals and banks run on. Never in iCloud, Google Photos or any other consumer service.

02

Never in the camera roll. Never in the gallery.

Photos are captured and kept inside the encrypted evooia app, completely separate from personal pictures. Nothing syncs to a private account, nothing surfaces in a shared album by accident.

03

Encrypted at every step.

Every photo is encrypted in transit and at rest to the industry’s highest standards, with the keys stored separately.

04

Stored in Switzerland.

Patient data is stored in data centres in Switzerland, protected by Swiss data protection law. The platform is designed to support GDPR, the Swiss FADP and HIPAA.

In daily use

Full control.

  • 01Role-based access
  • 02Tamper-evident audit trail
  • 03Consent management
  • 04Data minimisation
  • 05Originals stored unchanged
  • 06Regular encrypted backups

Standards

Certified infrastructure.

Microsoft Azure, which runs the platform, is certified to ISO 27001 and audited for SOC 2. The platform itself is designed around the frameworks medicine demands.

GDPR / DSGVO

EU data protection

Swiss FADP

Swiss data protection

HIPAA

US health privacy, BAA on request

ISO 27001 · SOC 2

Microsoft Azure infrastructure

Clear responsibilities

Your clinic keeps responsibility for its patient data, and control over it. evooia processes that data only as set out in the agreed data processing contract. For clinics with specific data hosting requirements, we look at individual deployment options.

Questions

Security and privacy, answered.

Where are patient photos stored?+
Patient photos are stored in Swiss data centres operated by Microsoft Azure, governed by Swiss data-protection law. They are never placed in a consumer photo service or synced to iCloud or Google Photos.
Is evooia HIPAA compliant?+
evooia is designed to support HIPAA-compliant deployments, and we sign a Business Associate Agreement where your practice is a covered entity. Every clinical photo is encrypted in transit and at rest, access is limited by role, and every view is logged. These are the same safeguards that carry the GDPR and Swiss FADP requirements.
Is evooia GDPR compliant?+
evooia is built for GDPR and Swiss FADP compliance. Patient data is hosted in Switzerland on Microsoft Azure, encrypted in transit and at rest, and processed only on the clinic's instruction. The underlying Microsoft Azure infrastructure is certified to ISO 27001 and independently audited for SOC 2. Day-to-day compliance also depends on how the clinic handles consent, access and retention.
Do patient photos stay out of the phone’s camera roll?+
Yes. Photos live inside the encrypted evooia app, not the phone’s gallery. Nothing syncs to iCloud or Google Photos and nothing can surface in a shared album by accident.
Who can access the patient photos?+
Access is role-based, so team members only see what their role permits, and every action is recorded in a full audit trail.
What happens if data is lost?+
In the unlikely event of data loss, evooia uses regular encrypted backups and defined recovery procedures to restore service as quickly as possible.
Is the data processed on the device or in the cloud?+
Alignment during capture runs on the device, and any further image processing runs on our own servers in Switzerland. Images are stored in an encrypted, access-controlled environment in the Swiss data centres of Microsoft Azure. Access is role-based and every action is recorded in a full audit trail.

Talk to us

Have a security question?

Security & Privacy | evooia