Because our system is secure by design, patient data can never end up out in the open. All privacy-sensitive information is only entered into the doctor's local database. Surgeries are first anonymized and grouped before they are uploaded to the national database for analysis.
The system is built on the integrity of doctors. The national data is not only anonymized for patients; doctors can't be linked to specific surgeries either. Users can't see the data and results of specific other users.
In addition to not storing any privacy-sensitive data, the system is equipped with the latest security standards. All data is sent and stored encrypted, we always keep the software up to date, and we regularly run stress and security tests in our test environments.