Security and privacy features of the product.
The following non-exhaustive security controls are implemented in the iTero® Element™ optical impression
system series:
PII data-at-rest is encrypted: Personally Identifiable Information (PII) is stored in an encrypted database.
This helps to prevent an attacker from capturing patient and customer information stored on the scanner.
Data-in-transit is encrypted: The scan data that is backed up to Align servers is transmitted over
transport layer security (TLS) encryption using trusted certificates. This helps to prevent an attacker from
capturing patient and customer information while in transit.
Anti-malware protections are in place: The scanners come with pre-installed Trend Micro anti-virus
software that checks for malicious files on the system. The anti-virus software definitions are updated
frequently and scans are scheduled to run daily on the devices.
Remote maintenance is not possible without permission: The devices use TeamViewer for
establishing a remote session. The TeamViewer software requires a User ID and password that must be
supplied from the customer to the Align service personnel before the connection can take place.
Changes to the operating system and software are restricted: The scanners implement a kiosk mode
that prevents the user from making any unwanted changes to the operating system and software
components.
User access management controls are enforced: A user account and password are required to utilize
the scanners. This helps protect access to the scanner and protects against unauthorized use.
Segregation of duties is applied: The scanners offer the ability to register multiple user accounts with
different roles to one scanner. There are roles for Doctor, Assistant, and Support Technician. This helps
ensure the ability to track activities performed by individual users better protecting the device.
If you have any questions or concerns about the risks as they are described, please do not hesitate to
contact TRM@aligntech.com or privacy@aligntech.com.
To Next Page
Loading...
