Built for healthcare. Secure from the ground up.
Working in healthcare places high demands on software. Procul meets all applicable laws and regulations by default — including NEN 7510, ISO 27001 and GDPR.
Certifications & standards
Procul is built and certified according to the highest healthcare-specific and international security standards.
ISO 27001 certified
Procul meets the international standard for information security. Our systems, processes and risk management are externally audited and certified.
- ✓Annual external audit
- ✓Documented risk management
- ✓Demonstrable for your purchaser or health insurer
Procul meets the international standard for information security. Our systems, processes and risk management are externally audited and certified.
- ✓Annual external audit
- ✓Documented risk management
- ✓Demonstrable for your purchaser or health insurer
Technical security
Multiple layers of protection — built in as standard, no extra configuration required.
Two-factor authentication
Every login requires a one-time password (OTP) via email.
- ✓OTP at every new session
- ✓Protects even with leaked passwords
- ✓NEN 7513-compliant login logging
Every login requires a one-time password (OTP) via email.
- ✓OTP at every new session
- ✓Protects even with leaked passwords
- ✓NEN 7513-compliant login logging
Questions about privacy and security
Transparency about how we handle your (patient) data.
All data is stored exclusively within the European Union — in data centres in Frankfurt and EU-West. Your data never leaves the EU.
Yes. Procul is certified according to ISO 27001 and NEN 7510. These certifications are periodically externally audited and renewed.
Yes. Procul is designed with privacy by design. Access to patient data is logged, data is separated per practice and stored exclusively in Europe.
Only employees of your own practice with the correct role have access.
Passwords are stored encrypted. Logging in always requires two-factor authentication via a one-time OTP code by email.
Procul has an incident response procedure. If a data breach is suspected, you will be informed as soon as possible in accordance with the GDPR notification obligation.
Questions about security?
Contact us — we will answer all your questions.