MedStack Announces European Expansion with New GDPR Compliance Offering



TORONTO, September 1, 2023 – MedStack, a Toronto-based data security and privacy compliance platform for digital health startups, is proud to announce compliance with GDPR regulations, formally expanding its ability to support customers operating in the United Kingdom and European Union and paving the way for the company’s next phase of growth.  


MedStack has been actively pursuing several UK certifications as the company looks to build its business overseas. It has a Data Protection Registration Certificate with the Information Commissioner’s Office (ICO) and recently completed its second Data Security and Protection (DSP) Toolkit assessment, a requirement of the Department of Health and Social Care (DHSC) for any organization accessing patient data in the UK. 


Earlier this year MedStack also announced its Cyber Essentials Plus certification, the highest level of certification backed by the UK government that demonstrates an organization’s commitment to cyber security.


Until now, MedStack has largely operated in Canada and the United States, supporting North America’s rapidly growing digital health ecosystem. Earlier this year it earned the distinction as the #1 HIPAA compliance solution by G2, the world’s largest and most trusted software marketplace.


“Our customers can rest assured knowing that MedStack’s systems are being maintained in a way that protects data being hosted in the UK and EU with appropriate safeguards, and can confidently rely on us to provide expert GDPR advice,” says Jodie Struthers, Director of Security and Operations at MedStack.   


MedStack is already working with several customers operating in the UK including Tortus AI, a London-based startup building a next-generation AI assistant for physicians, and Phenotips, a precision medicine software company used by clinicians and researchers around the world.


MedStack is also now in a position to support companies operating in countries outside of the UK and EU with compliance regulations based on GDPR, including Ukraine, Japan, South Korea, Costa Rica, Argentina, and Jamaica.



About MedStack


MedStack is a cloud automation technology company built specifically for the needs of the digital health industry. Its standardized platform allows healthcare innovators to deliver ready-to-buy, compliant applications to market and is emerging as the de facto standard for delivering industry requirements for digital health. MedStack is trusted by hundreds of leading digital health companies across North America and has been accepted in implementation by several notable payers and providers. The company is proudly based in Toronto, Canada.