Skip to content

Solution

Healthcare software suppliers. Two standards, one management system.

Hospitals and care organizations often ask their software suppliers for NEN 7510 on top of ISO 27001, especially when health data is processed on their behalf. Both standards share most of their structure. Trustbird lets you run them as one management system, with the healthcare additions clearly in view.

Become a design partner Talk to us
  • ISO 27001 and NEN 7510 on one shared core
  • Health data and its processing recorded
  • One file for questions from care organizations

Built for suppliers to healthcare

Care organizations need to trust how you handle their patients' data. Trustbird helps you show that, without maintaining two separate systems.

Both standards, one core

Policy, risks, internal audit and management review are maintained once and count for ISO 27001 and NEN 7510.

Healthcare controls marked

The controls and guidance that NEN 7510 adds are shown as a separate set, so you know exactly what healthcare asks beyond ISO 27001.

Health data in view

Record where health data is stored, which systems and suppliers process it, and which controls protect it.

Data processing agreements with care organizations

Keep track of data processing agreements with each care organization and link them to the processing activities and controls they concern.

Answers for procurement and questionnaires

Care organizations send questionnaires and procurement requirements. Your approved policies, controls and evidence give you one source for the answers.

NIS2 through your customers

Care organizations that fall under NIS2 ask their suppliers about incident notification and continuity. Those questions link to the controls you already have.

How a healthcare supplier starts

  1. 01

    Describe your product and customers

    Tell Trustbird what you deliver to which care organizations, and which data is involved.

  2. 02

    Adopt both standards

    Switch on ISO 27001 and NEN 7510. The shared requirements are linked to the same controls.

  3. 03

    Work on the healthcare additions

    Decide on the healthcare-specific controls and guidance, and record your reasoning.

  4. 04

    Prepare a combined audit

    Run one internal audit and management review and export one file for both standards.

Frequently asked questions

Is NEN 7510 required for software suppliers by law?
The legal obligation lies with care providers, not directly with their suppliers, and the law does not require a certificate. In practice care organizations often ask for it in contracts and procurement, especially from suppliers that process health data on their behalf. According to NEN, ISO 27001 counts as equivalent for suppliers that do not. Check what your customers expect.
Can we be audited for both standards at once?
Many certification bodies offer a combined audit. Trustbird keeps one Statement of Applicability with a column per standard, which makes that easier to prepare.
Where is our data stored?
In the European Union. The data of every customer is kept strictly apart, and every change in Trustbird is recorded in an audit trail.

Related

See what Trustbird does for your organization

Trustbird is being built with two certified design partners, and we are looking for more companies to join them at co-founder pricing. Apply as a design partner, or mail us with a question.

Become a design partner support@trustbird.com