The Technology Toolkit that makes projects

compliant instantly

The Chino.io platform provides of a set of modules to make your digital health project GDPR or HIPAA compliant.
‍
It allows you to solve the most complex and risky compliance tasks, enabling you to deliver your project globally.

Companies who trusted Chino.io

The only ISO 13485, 27001, and 9001 certified cloud solution to build certified software

Health data security

Chino.io lets you safely store and encrypt all your health data, such as structured medical records, scans or patient-doctor chats.
‍
It works like a standard storage service, while ensuring highest compliance standards, eliminating risks, and letting you focus on your application.

Data encryption

Ensure compliance with EU and US regulations and medical standards (e.g. GDPR, HIPAA, DVG, NHS Security Toolkit, HDS, etc). It takes one API call to store your data with secure record level encryption.

Pseudonymisation and de-identification

Encrypt parts of your health records or personal identifiers.
De-identification relieves you from privacy implications. Our data architect can give you an assessment and help design your setup.

Secure user management and data sharing

Plug and play sign-up, authentication and session management with our OAuth2.0 as a Service.
‍
The service also implements flexible record-level access control for compliant data sharing among users and applications.
‍
This gives you all the granularity you need to implement compliant data storage.

Identity Management

Implement user signup, session management, audit logs, monitoring and data access authorisation.

Granular access control

Define flexible access control policies for users or groups on single documents or collections. No programming is needed.

Secure and compliant data sharing

Securely share data among applications and users, while ensuring compliance with EU and US laws.

Verifiable Audit Logs and monitoring

Implement immutable, verifiable and legally-valid logging for your project.
‍
The Chino.io audit log service is designed to meet all compliance and medical standards.
You can create custom events, in addition to the Platform modules which automatically create compliant logs.
‍
Logs can be queried via API to define alerts.

Ensure accountability

Audit Log module meets all the requirements of GDPR and HIPAA. They are also sanitised to ensure they don’t leak sensitive data.

Query, monitor or export logs

You can search for specific logs, trace back events by type, create alerts, view all events over a time window or generate an audit-ready export.

Comply with medical standards

Audit logs meet the requirements of GDPR Art. 25 & 32, HIPAA 164.312(b) and FDA 21 CFR ch.11, DICOM, etc.

User Consent management

The Chino.io consent management module allows you to collect, store, query and update consents of your users.
‍
Consent is often the legal basis for storing personal data and is a key part of GDPR.

Our system makes it easy for your users to view the consents they gave, and modify or withdraw them at any time.

Data encryption

Ensure legal validity of consents. Keep details of every user consent you collect in your product to know exactly what each user accepted at any moment.

Keep consents synchronised

Query or update user preferences instantly. Updates keep legally valid history for auditing purposes and demonstrate data subject right implementation (e.g. Right to be Forgotten).

You choose the setup

We offer cloud or custom installations. You always retain full control over your data as with any other managed DB.

GDPR compliance instantly

With the Chino.io multi-tenant cloud instance you don't need to setup or configure anything.

‍
Chino.io is a scalable, reliable, and secure platform that offers compliance with all data protection laws.

No setup, compliant from day 0

Scalable volume-based pricing

GDPR compliance guaranteed

Custom install to suit your needs

If you have specific technical, regulatory or business requirements, we can provide a custom installation of Chino.io on your own server or cloud instance.
‍
Deployment takes just a few hours via our automated Docker-based installations.

Dedicated deployment on any cloud or hosting provider

HIPAA compliance to unlock the US market

Personalized technical and compliance support

What our customers say
about Chino.io

“Chino.io worked closely with us to solve all the compliance and tech challenges. This ensures our users’ trust in our new service

Robert Kerr
CTO Seer Medical

“Chino.io made GDPR compliance easy. Without them, we would neve have been able to “go-to-market” so quickly and confidently in the EU.”

Robert Kerr
CTO Seer Medical

“The beauty of working with Chino.io is their problem-solving approach. They are always avaiable when we need.”

Robert Kerr
CTO Seer Medical

Want to learn more?