Security & privacy

Security and privacy as a foundation.

Triagen processes sensitive health data. Below you can read how we handle certifications, data storage, GDPR, and medical confidentiality.

Certification

Certification & Standards.

ISO 27001

Certified since October 2026. ISO 27001 is the international standard for an information security management system: risks mapped, controls documented and audited externally every year.

ISO/IEC 27001:2022 · certificate NL 3171.1.1 · valid until 26 October 2029

NEN 7510

Certified since October 2026. NEN 7510 is ISO 27001 applied to healthcare information, the standard you should expect from anyone handling medical data.

NEN 7510-1:2024 · certificate NL 3172.1.1 · valid until 26 October 2029

Both certificates were issued by Brand Compliance B.V., a certification body accredited by the Dutch Accreditation Council (RvA), and cover the Triagen platform including its AI-supported functionality. To us a certificate is the baseline, not the proof: an audit tests the management system on a sample basis. So do ask further.

View the certificates

Trust Center

Our Trust Center holds our current security controls, certifications, subprocessors and documentation. Publicly accessible and always up to date.

Open Trust Center

Data & privacy

Data Sovereignty & GDPR.

Data Location

All health data is stored encrypted (AES-256) and transmitted (TLS 1.3) within the Netherlands and the EU. We do not use sub-processors outside the EEA.

Privacy by Design

Data is processed exclusively through secure API connections. Model training on customer data is disabled — your health data is never used to improve AI models.

Processing Agreement

A standard GDPR-compliant data processing agreement is available for all organizations working with Triagen.

Medical confidentiality

Medical Confidentiality & WGBO.

Access to patient data is strictly regulated through Role-Based Access Control (RBAC). Only authorized professionals have access.

Role-Based Access Control (RBAC)

Only authorized professionals

All access is logged in accordance with ISO 27001 and NEN 7510

Full audit trail at API and database level

Explicit employee consent prior to AI interaction

What the AI does and does not do, and who decides, is set out in How we use AI.

Contact

Questions about our security architecture?

Our team is happy to answer your questions about security, compliance, and data protection.