We take compliance, information security and data protection very seriously.
In addition to continuously verifying our compliance with regulations in the countries and states we operate in (GDPR, GDPR UK, NHS Digital and HIPAA), we voluntarily certify for the international ISO 27001 standard, and the stricter NEN 7510 standard (Netherlands only). Every year, we are audited by two different independent organizations to review our internal processes and certify our compliance with all applicable regulations and standards.
When required, we are prepared to enter into Data Processing Agreements or Business Associate Agreements with our customers for GDPR (EU) and HIPAA (US) compliance.
Proof of certification for ISO 27001 (and NEN 7510) and our Statement of Applicability are available upon request. Our information security policy is public and available here.
In addition to continuously verifying our compliance with regulations in the countries and states we operate in (GDPR, GDPR UK, NHS Digital and HIPAA), we voluntarily certify for the international ISO 27001 standard, and the stricter NEN 7510 standard (Netherlands only). Every year, we are audited by two different independent organizations to review our internal processes and certify our compliance with all applicable regulations and standards.
When required, we are prepared to enter into Data Processing Agreements or Business Associate Agreements with our customers for GDPR (EU) and HIPAA (US) compliance.
Proof of certification for ISO 27001 (and NEN 7510) and our Statement of Applicability are available upon request. Our information security policy is public and available here.