Security & privacy
Security and privacy as a foundation.
Triagen processes sensitive health data. Below you can read how we handle certifications, data storage, GDPR, and medical confidentiality.
Certification
Certification & Standards.
ISO 27001
Our infrastructure is designed based on the ISO 27001 standard for information security. Target certification: August 2026.
NEN 7510
Triagen operates according to NEN 7510 guidelines for information security in healthcare. Target certification: August 2026.
A Letter of Intent confirming our certification path is available on request.
Data & privacy
Data Sovereignty & GDPR.
Data Location
All health data is stored encrypted (AES-256) and transmitted (TLS 1.3) within the Netherlands and the EU. We do not use sub-processors outside the EEA.
Privacy by Design
Data is processed exclusively through secure API connections. Model training on customer data is disabled — your health data is never used to improve AI models.
Processing Agreement
A standard GDPR-compliant data processing agreement is available for all organizations working with Triagen.
Medical confidentiality
Medical Confidentiality & WGBO.
Access to patient data is strictly regulated through Role-Based Access Control (RBAC). Only authorized professionals have access.
Role-Based Access Control (RBAC)
Only authorized professionals
All access is logged in accordance with ISO 27001 and NEN 7510
Full audit trail at API and database level
Explicit employee consent prior to AI interaction
Contact
Questions about our security architecture?
Our team is happy to answer your questions about security, compliance, and data protection.