---
title: "Certificates of our hosting provider"
summary: "The MediSync Cloud runs on Amazon Web Services. AWS is audited against ISO/IEC 27001 and BSI C5, among others. MediSync GmbH itself is not ISO/IEC 27001 certified."
url: "https://help.medisynchealth.ai/en/privacy/certificates"
product: "Privacy & security"
platforms: ["web","ios","android"]
access: "public"
reviewed: "2026-09-24"
updated: "2026-11-11"
version: "Dashboard 2.10"
---

# Certificates of our hosting provider

The MediSync Cloud runs on Amazon Web Services. AWS is audited against ISO/IEC 27001 and BSI C5, among others. MediSync GmbH itself is not ISO/IEC 27001 certified.

MediSync GmbH is not ISO/IEC 27001 certified. The certificates below belong to our hosting provider Amazon Web Services (AWS), whose infrastructure the MediSync Cloud runs on.

## Evidence from AWS

For the infrastructure the MediSync Cloud runs on, MediSync holds this evidence from AWS:

- ISO/IEC 27001 (information security)
- ISO/IEC 27017 (information security in the cloud)
- ISO/IEC 27701 (privacy)
- BSI C5 (Cloud Computing Compliance Criteria Catalogue)
- SOC 2 Type 2 and SOC 3

You get the documents on request from [datenschutz@medisync.me](mailto:datenschutz@medisync.me). AWS releases some of them only under confidentiality.

## What the certificates cover

The certificates cover the security of the AWS data centres and cloud services. They do not cover the MediSync application or the processes of MediSync GmbH. [Technical and organisational measures](https://help.medisynchealth.ai/en/privacy/technical-and-organisational-measures) describes what MediSync itself does.

For a dedicated instance or an installation in your own data centre, the evidence of the providers in your individual contract applies.