{"id":27799,"date":"2024-07-25T07:53:50","date_gmt":"2024-07-25T07:53:50","guid":{"rendered":"https:\/\/quickbirdmedical.com\/?post_type=news&#038;p=27799"},"modified":"2026-09-03T14:20:03","modified_gmt":"2026-09-03T14:20:03","slug":"limited-choice-cloud-providers-c5-attestation","status":"publish","type":"news","link":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/","title":{"rendered":"Limited Choice of Cloud Providers &#8211; Challenges With the C5 Attestation"},"content":{"rendered":"<p>The <strong>rules on the C5 attestation<\/strong> from the <strong>DigiG<\/strong> are relevant not only for DiGA manufacturers:<\/p>\n<p>According to <strong>SGB V<\/strong>, they affect all <strong>&#8220;service providers within the meaning of the fourth chapter and health and long-term care insurance funds as well as their respective data processors&#8221;<\/strong>. This includes providers of practice management software, for example. Not included are providers of general health apps that are not part of the benefits catalogue of the statutory health insurers.<\/p>\n<p>The new mandatory deadlines primarily concern the <strong>choice of cloud provider<\/strong> processing the health data:<\/p>\n<p>These cloud providers must&#8230;<\/p>\n<ul>\n<li>have held a so-called <strong>C5 attestation (type 1)<\/strong> <strong>since July 2024<\/strong>, and<\/li>\n<li>hold a <strong>C5 attestation (type 2)<\/strong> <strong>from July 2025<\/strong>.<\/li>\n<\/ul>\n<p>One problem at the moment is the <strong>limited choice of cloud providers<\/strong> with a C5 attestation, or the fact that a cloud provider&#8217;s existing C5 attestations do not necessarily cover health data as an area of use.<\/p>\n<p>The C5 catalogue covers <strong>17 topic areas<\/strong> with a total of <strong>125 criteria<\/strong>, some of which are also met through other standards. For processing health data, there is currently hardly any way around attestation for cloud providers. Assessing the criteria individually against <strong>certificates already held<\/strong> is possible, but very laborious and <strong>may not be possible without gaps<\/strong>. Certification to ISO 27001, for example, does not cover all aspects of a C5 attestation. The complexity of such an audit becomes clear from the <strong>cross-reference table published by the BSI<\/strong> at <a href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/CloudComputing\/Anforderungskatalog\/2020\/C5_2022_Referenztabelle_ISO27001.html\">https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/CloudComputing\/Anforderungskatalog\/2020\/C5_2022_Referenztabelle_ISO27001.html<\/a><\/p>\n","protected":false},"featured_media":0,"template":"","categories":[],"tags":[],"display":[54],"class_list":["post-27799","news","type-news","status-publish","hentry","display-display-on-news-page"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Few Cloud Providers: Challenges With the C5 Attestation<\/title>\n<meta name=\"description\" content=\"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Few Cloud Providers: Challenges With the C5 Attestation\" \/>\n<meta property=\"og:description\" content=\"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/\" \/>\n<meta property=\"og:site_name\" content=\"QuickBird Medical\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-03T14:20:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/quickbirdmedical.com\/wp-content\/uploads\/2026\/08\/Social-Preview-Fallback-Image.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"3749\" \/>\n\t<meta property=\"og:image:height\" content=\"2109\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/news\\\/limited-choice-cloud-providers-c5-attestation\\\/\",\"url\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/news\\\/limited-choice-cloud-providers-c5-attestation\\\/\",\"name\":\"Few Cloud Providers: Challenges With the C5 Attestation\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#website\"},\"datePublished\":\"2024-07-25T07:53:50+00:00\",\"dateModified\":\"2026-09-03T14:20:03+00:00\",\"description\":\"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/news\\\/limited-choice-cloud-providers-c5-attestation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/news\\\/limited-choice-cloud-providers-c5-attestation\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/news\\\/limited-choice-cloud-providers-c5-attestation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/home-neu\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Limited Choice of Cloud Providers &#8211; Challenges With the C5 Attestation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/\",\"name\":\"QuickBird Medical\",\"description\":\"Entwicklung von medizinischer Software und DiGA\",\"publisher\":{\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#organization\",\"name\":\"QuickBird Medical\",\"url\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/quickbirdmedical.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/QBM_Logo_web-01-1.webp\",\"contentUrl\":\"https:\\\/\\\/quickbirdmedical.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/QBM_Logo_web-01-1.webp\",\"width\":875,\"height\":255,\"caption\":\"QuickBird Medical\"},\"image\":{\"@id\":\"https:\\\/\\\/quickbirdmedical.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/de.linkedin.com\\\/showcase\\\/quickbird-medical\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Few Cloud Providers: Challenges With the C5 Attestation","description":"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/","og_locale":"en_US","og_type":"article","og_title":"Few Cloud Providers: Challenges With the C5 Attestation","og_description":"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.","og_url":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/","og_site_name":"QuickBird Medical","article_modified_time":"2026-09-03T14:20:03+00:00","og_image":[{"width":3749,"height":2109,"url":"https:\/\/quickbirdmedical.com\/wp-content\/uploads\/2026\/08\/Social-Preview-Fallback-Image.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/","url":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/","name":"Few Cloud Providers: Challenges With the C5 Attestation","isPartOf":{"@id":"https:\/\/quickbirdmedical.com\/en\/#website"},"datePublished":"2024-07-25T07:53:50+00:00","dateModified":"2026-09-03T14:20:03+00:00","description":"DigiG C5 attestation rules mandate type 1 and type 2 cloud compliance for healthcare software and insurers, limiting vendor options.","breadcrumb":{"@id":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/quickbirdmedical.com\/en\/news\/limited-choice-cloud-providers-c5-attestation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/quickbirdmedical.com\/en\/home-neu\/"},{"@type":"ListItem","position":2,"name":"Limited Choice of Cloud Providers &#8211; Challenges With the C5 Attestation"}]},{"@type":"WebSite","@id":"https:\/\/quickbirdmedical.com\/en\/#website","url":"https:\/\/quickbirdmedical.com\/en\/","name":"QuickBird Medical","description":"Entwicklung von medizinischer Software und DiGA","publisher":{"@id":"https:\/\/quickbirdmedical.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/quickbirdmedical.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/quickbirdmedical.com\/en\/#organization","name":"QuickBird Medical","url":"https:\/\/quickbirdmedical.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/quickbirdmedical.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/quickbirdmedical.com\/wp-content\/uploads\/2022\/06\/QBM_Logo_web-01-1.webp","contentUrl":"https:\/\/quickbirdmedical.com\/wp-content\/uploads\/2022\/06\/QBM_Logo_web-01-1.webp","width":875,"height":255,"caption":"QuickBird Medical"},"image":{"@id":"https:\/\/quickbirdmedical.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/de.linkedin.com\/showcase\/quickbird-medical\/"]}]}},"_links":{"self":[{"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/news\/27799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/news"}],"about":[{"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/types\/news"}],"wp:attachment":[{"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/media?parent=27799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/categories?post=27799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/tags?post=27799"},{"taxonomy":"display","embeddable":true,"href":"https:\/\/quickbirdmedical.com\/en\/wp-json\/wp\/v2\/display?post=27799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}