Compliance

Our commitment

Ensuring Data Privacy and Compliance

At Your Research, we place a strong emphasis on compliance and adhere to rigorous standards to ensure the privacy, security, and integrity of your data. We understand the importance of meeting regulatory requirements and maintaining the trust of our users.

ISO 27001 & NEN 7510 certified

GDPR & HIPAA compliant

ISO 9001 compliant

GCP (Good Clinical Practice)

Medical software development according to ISO-62304

Medical Device (CE certified)

GCP compliant

FDA 21 CFR part 11

Data protection

We strictly adhere to applicable data protection laws and regulations, such as the General Data Protection Regulation (GDPR) and other regional data privacy laws. We implement robust measures to safeguard personal data and ensure it is processed lawfully and securely.

Compliance Framework

We have established a comprehensive compliance framework that covers all aspects of our operations. This framework includes policies, procedures, and controls to ensure adherence to legal and regulatory requirements.

Security Measures

We employ state-of-the-art security measures to protect your data from unauthorized access, loss, or theft. This includes encryption, access controls, regular security audits, and ongoing risk assessments.

Third-Party Vendors

When engaging third-party vendors, we carefully assess their compliance with data protection regulations and ensure they meet our stringent standards. We enter into appropriate contractual agreements to safeguard your data when it is shared with these vendors.

Confidentiality

We treat your data with the utmost confidentiality. Our employees and authorized personnel undergo comprehensive training on data protection and are bound by strict confidentiality agreements.

Continuous Improvement

We are committed to continuous improvement in our compliance practices. We stay updated with evolving regulations and industry best practices, allowing us to adapt and enhance our compliance measures accordingly.

Data Subject Rights

We respect the rights of data subjects and provide mechanisms for individuals to exercise their rights, such as access, rectification, erasure, and data portability. Our processes are designed to handle such requests promptly and efficiently.