{"id":86208,"date":"2021-07-27T06:16:10","date_gmt":"2021-07-27T04:16:10","guid":{"rendered":"https:\/\/www.gpi.it\/backup\/certificazioni\/"},"modified":"2025-12-09T17:26:42","modified_gmt":"2025-12-09T16:26:42","slug":"compliance","status":"publish","type":"page","link":"https:\/\/www.gpigroup.com\/en-us\/compliance\/","title":{"rendered":"Compliance"},"content":{"rendered":"

[vc_row el_class=”text-row”][vc_column][vc_column_text el_class=”gpi_signature_title_human”]<\/p>\n

Compliance<\/h1>\n

[\/vc_column_text][vc_row_inner][vc_column_inner][vc_column_text][\/vc_column_text][vc_column_text]Gpi USA takes pride in the quality and security of our software products. To ensure that we meet the highest industry standards, we have obtained a number of compliance licenses and certifications.<\/p>\n

e-Delphyn Suite is 510(k)-cleared as a medical device by the U.S. Food and Drug Administration.<\/p>\n

Additionally, we hold the following licenses and certifications.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row el_class=”my-5″][vc_column width=”1\/4″][vc_column_text]<\/p>\n

LICENSES<\/h3>\n

[\/vc_column_text][vc_column_text]\"Logo<\/p>\n

 <\/p>\n

\"Logo[\/vc_column_text][\/vc_column][vc_column width=”3\/4″][vc_column_text]<\/p>\n

 <\/p>\n

 <\/p>\n

[\/vc_column_text][vc_column_text el_class=”mb-0″]International Council for Commonality in Blood Bank Automation (ICCBBA)<\/strong><\/p>\n

ICCBBA is an international non-state actor in official relations with the World Health Organization (WHO) that manages, develops, and licenses ISBT 128.<\/p>\n

The mission of ICCBBA is to improve patient safety through standardization of the way critical information is carried on labels of Medical Products of Human Origin (MPHO).<\/p>\n

Information Standard for Blood and Transplant (ISBT)<\/strong><\/p>\n

ISBT 128 provides international consistency to support the transfer, transfusion, or transplantation of medical products of human origin, by encoding information in a manner that allows the information to be transferred from one computer system to another in a way that is unambiguous and accurate. The acronym ISBT was originally derived from the important role played by the International Society of Blood Transfusion in the development of the standard. Today it expands as Information Standard for Blood and Transplant. The number 128 reflects the 128 characters of the ISO\/IEC 646 7-bit character set[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”my-5″][vc_column width=”1\/4″][vc_column_text]<\/p>\n

CYBERSECURITY<\/h3>\n

[\/vc_column_text][vc_column_text]\"Gpi<\/a>[\/vc_column_text][vc_column_text]\"The[\/vc_column_text][\/vc_column][vc_column width=”3\/4″][vc_column_text]<\/p>\n

 <\/p>\n

 <\/p>\n

[\/vc_column_text][vc_column_text el_class=”mb-0″]System and Organization Controls (SOC) 2 Audits<\/strong><\/p>\n

Gpi USA utilizes enterprise-grade best practices to protect our customers’ data and works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 2 Type I & II reports against stringent standards.<\/p>\n

[\/vc_column_text][vc_tta_accordion title_tag=”p” section_title_tag=”p” color=”white” c_icon=”chevron” active_section=”2″ no_fill=”true” collapsible_all=”true”][vc_tta_section tab_id=”1682627494031-62a34228-8244″ title=”Learn more about Drata Security and Compliance”][vc_column_text]Continuous Security Control Monitoring<\/strong><\/p>\n

Gpi USA uses Drata\u2019s automation platform to continuously monitor 100+ internal security controls across the organization against the highest possible standards. Automated alerts and evidence collection allow Gpi USA to confidently prove its security and compliance posture any day of the year while fostering a security-first mindset and culture of compliance across the organization.<\/p>\n

\u200bEmployee Training<\/strong><\/p>\n

Security is a company-wide endeavor. All employees complete an annual security training program and employ best practices when handling customer data.<\/p>\n

\u200bPenetration Tests<\/strong><\/p>\n

Gpi USA works with industry-leading security firms to perform annual network and application layer penetration tests.<\/p>\n

\u200bSecure Software Development<\/strong><\/p>\n

Gpi USA utilizes a variety of manual and automatic data security and vulnerability checks throughout the software development lifecycle.\u200b<\/p>\n

\u200bData Encryption<\/strong><\/p>\n

Data is encrypted both in transit using TLS and at rest.<\/p>\n

\u200bVulnerability Disclosure Program<\/strong><\/p>\n

If you believe you\u2019ve discovered a bug in Gpi USA security, please get in touch with infosec@gpiusa.com<\/a>. Our security team promptly investigates all reported issues.[\/vc_column_text][\/vc_tta_section][\/vc_tta_accordion][vc_column_text]Independent auditor Sensiba San Filippo, LLP<\/a> (SSF) objectively certifies our controls to ensure the continuous security of our customers’ data.<\/p>\n