generated: '2026-07-24'
method: searched
source: https://www.medadvisorsolutions.com/en-au/data-and-privacy
standards:
  - id: iso-27001
    conforms: true
    evidence: >-
      "ISO 27001-certified, meeting the highest global standards for information
      security"; ISMS subject to independent audit on a minimum annual basis
      (data-and-privacy page).
  - id: hipaa
    conforms: true
    evidence: Security program built on the HIPAA framework with least-privilege access controls.
  - id: gdpr
    conforms: true
    evidence: GDPR compliance framework implemented.
  - id: australian-privacy-principles
    conforms: true
    evidence: Security program built on the Australian Privacy Principles (APP).
  - id: oauth2
    conforms: false
    evidence: Auth is a JWT bearer issued via a clientId/clientSecret + pharmacy-credential exchange, not OAuth 2.0.
  - id: openid-connect
    conforms: false
  - id: hl7-fhir
    conforms: false
    evidence: HL7/HTTP REST surface; no FHIR CapabilityStatement or SMART-on-FHIR config served.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a proprietary OperationResult envelope, not application/problem+json.