Trust is the foundation

Compliance is not a checkbox. It is the whole product.

You work with some of the most sensitive data there is: trauma and health data. Traucare was built from the ground up to protect it, not as an afterthought, but at its core.

Working towards NEN 7510 GDPR Data in Europe Encryption at rest Mandatory 2FA

Working towards NEN 7510

The Dutch standard for information security in healthcare. We design our processes and architecture around it and are actively working towards certification.

GDPR & data processing agreement

Traucare is the processor; your practice is the controller. You receive a clear data processing agreement (DPA), available directly from your account.

Encryption

Encrypted at rest, with separate field-level encryption for citizen service numbers (BSN) and medical notes. The data itself is protected, not just the connection.

European hosting

Your data is stored within the EU, with a hosting partner in Germany, and stays there. No US sub-processors, no transfers outside the EU.

Mandatory 2FA

Two-factor authentication is mandatory for every account and set up at first login. No weak links.

Tenant isolation (RLS)

Row-Level Security in the database ensures practices can never see each other's data, enforced at database level, not just in code.

Immutable logs

Every view and change is recorded in an append-only log. Entries cannot be edited or deleted, not even by administrators or by us. That is exactly what an auditor wants to see.

Transparency & incident procedure

Our status is publicly available. In the event of an incident, we follow a fixed procedure, including the statutory data breach notification requirement, clearly and on time.

status.traucare.nl

On this website too

We only track with your consent.

This website does not use Meta Pixel, HubSpot or any other external tracking service. We do use Google Analytics 4 to measure how our website is used, but only after you give consent through the cookie banner. Without consent, no analytics cookies are set and no tracking scripts are loaded.

IP anonymisation is enabled and we switch off advertising and personalisation signals: the data is never used for advertising. The standard we apply in our software, we also apply to our own website.

Tracking only with consent IP anonymisation on No advertising data No third parties Consent can always be withdrawn