Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

DEVELOPER

Sandbox

Use isolated synthetic identities, resources and device simulations to validate contracts and failure behavior without implying production readiness.

01 / CONCEPT

Integration contract

01

Synthetic only

No real patient data, production secrets or real clinical identifiers.

02

Resettable

Test fixtures may be reset; integrations must not depend on sandbox persistence as a business record.

03

Failure simulation

Exercise authorization denial, malformed payload, rate limit, timeout and duplicate delivery.

04

Evidence

Keep test cases/results so production review is based on demonstrated behavior.

02 / WORKFLOW

From sandbox to evidence

01Provision sandbox app
02Load synthetic fixtures
03Run happy path
04Run negative/failure paths
05Inspect logs/correlation
06Export readiness evidence

03 / SECURITY & PRODUCTION

Production is an evidence decision

Sandbox is synthetic and resettable. No real patient data, production secret or operational availability claim is inferred from sandbox behavior.