Mobile-ID Digital Trust
ISO/IEC 27001:2022 · SIS351224I008
Published certification scope
View evidence
Tiếng Việt
HomeREST API
Synchronous business operations with explicit authorization, correlation, idempotency and error semantics.
Configuration-dependentHEALTH DATA & INTEROPERABILITY
Healthcare Interoperability Center
One integration contract for data, authorization, events and evidence from sandbox to production.
OpenAPI
Machine-readable request, response and error contracts used to align client generation, validation and test evidence.
Configuration-dependentFHIR R4
Profile-governed exchange of healthcare resources, identifiers and terminology; production support remains profile-specific.
Configuration-dependentSMART on FHIR
OAuth-based application launch and scoped access that binds application identity, user context and permitted FHIR data.
Configuration-dependentHL7v2
Message-based integration with mapping, acknowledgement, correlation and replay controls at the legacy-system boundary.
Configuration-dependentDICOM
Imaging objects and metadata organized around study, series and instance context with governed access and retention.
Configuration-dependentDICOMweb
Web-oriented imaging query/retrieve/store integration whose exact operations and deployment support are configuration-dependent.
Configuration-dependentWebhooks
Outbound callbacks with event identity, signature/authentication, retry and duplicate-delivery handling.
Configuration-dependentEvents / AsyncAPI
Asynchronous event contracts that define topic, payload, correlation, ordering assumptions and consumer recovery behavior.
Configuration-dependentOAuth 2.1
Authorization boundary for clients and users with scoped access, secure redirect/PKCE patterns where applicable, and token lifecycle controls.
Configuration-dependentOIDC
Federated authentication and identity claims used to establish session/user context without replacing application authorization.
Configuration-dependentmTLS
Certificate-bound transport/client authentication with issuance, trust, rotation, revocation and expiry operations.
Configuration-dependentDeviceKit
Device-facing integration surface for discovery, pairing, measurement sessions, provenance and recoverable device errors.
Configuration-dependent
FHIR R4
Profiles and validation
Resources are paired with identifiers, terminology, scopes and validation outcomes.
CapabilityStatementPatientObservationDiagnosticReportAppointmentConsentIdentifierTerminologyBundleValidation