MediMe
Trust Center

Security, data handling and validation, in one place.

What an insurance organization needs to review before working with MediMe: our certification, how data is handled, how every output is validated and traced to its source, and how to request due-diligence documents.

ISO/IEC 27001
Certification

ISO/IEC 27001 certified

MediMe's information security management system is certified to ISO/IEC 27001, the international standard for managing information security.

The certificate, including its scope and validity, is available on request.

How we work

Six areas every review covers.

Information security

Security is managed as a certified system, not a set of one-off measures.

  • ISO/IEC 27001 certified information security management
  • Access granted by role, to authorized personnel only
  • Security requirements reviewed in every engagement

Data handling

Which data we process, for whom and for how long is defined before work starts.

  • Documents, users and permitted uses scoped per engagement
  • Retention and deletion terms set in the agreement
  • Integration and data-flow requirements reviewed with your team

Validation and source linking

Every delivered field can be traced back to where it came from.

  • Each field references its document, page and section
  • Explicit states: verified against a defined check, needs review, missing or blocked
  • Fields that cannot be confirmed are flagged, never filled in

Human oversight

MediMe provides validated data. Your professionals make the decisions.

  • Professional decisions remain with authorized personnel
  • Review steps defined per use case
  • MediMe does not make coverage decisions on your behalf

AI governance

AI is used inside a defined scope, and its output is checked before it is delivered.

  • Use of AI defined per use case
  • Outputs pass validation before delivery
  • Quality measures defined and reviewed per use case

Permissions and scope

Who can see what is set explicitly, not assumed.

  • Defined users, sources and permitted uses
  • Access reviewed when an engagement changes
Due diligence

Documents for your security and procurement review.

Available to organizations evaluating MediMe, shared directly with your security, legal or procurement team.

Ask for the documents when you request a working session, or through your MediMe contact.

  • ISO/IEC 27001 certificate, with scope and validity
  • Responses to your security questionnaire
  • Data processing terms
  • Architecture and data-flow overview for your use case
Report a security issue

If you believe you have found a security vulnerability in a MediMe service, contact us directly. Please do not include customer data in your report.

support@medime.ai

Ready to review the fit for your organization?

We'll walk your team through security, data handling and validation for your specific use case.