For CMIO, CISO and DPO
Notal Care for IT, information security and privacy
Architecture, hosting, logging in line with NEN 7513, sub-processors and DPIA input. Everything you need for the supplier assessment.
How the report reaches your EHR
CMIO and IT
EHR integration. Scrivio, Epos, Zilos, HCI and more on request. You can also export as Word or PDF.
To EHR integrationsAccess management. Roles and permissions per organisation, team and record.
Hosting. Processed and stored in the Netherlands.
Our status and timeline, and the documents
CISO
NEN 7510 and ISO/IEC 27001. Set up in line with both; certification audit scheduled.
NEN 7513. Access and changes are logged in line with NEN 7513 and retained.
Evidence. Statement of Applicability, ISMS scope, audit schedule, penetration test.
GDPR and DPIA
DPO and privacy
No audio storage. Audio is converted to text and not stored.
Data processing agreement. Available as standard (BOZ/GGZ model).
Sub-processors. Overview in the document pack.
No training on your data. Your data is not used to train models.
Consent. No consent, no recording.
Information for clients
Further reading
Certification and regulation
NEN 7510, ISO 27001, MDR and the EU AI Act, with timeline.
To certification and regulationFrequently asked questions
Is the session stored?
The audio is not. The transcript is.
Is Notal Care certified to NEN 7510 or ISO 27001?
We work in line with both standards.
Does Notal Care work with our EHR?
Scrivio, Epos, Zilos, HCI and more on request. You can also export as Word or PDF.
Is Notal Care a medical device?
Partly. The core for documentation and record building is not. The clinical modules are being certified as a class IIa medical device; they will become available after CE marking, expected in the third quarter of 2027.
Schedule an IT session
Prefer the documents first? Request the pack and we will then schedule a session with your IT team, CISO or DPO.