Home › Compliance › NEN 7512

NEN 7512 compliance software for Dutch healthcare exchange.

A trust register per exchange flow, UZI / AGB identification per endpoint, mutual TLS enforcement, qualified time stamps for hoog-level traffic and a per-partner audit trail. Built for hospitals, GP practices, regional exchanges, and the suppliers serving them.

Open the portal See pricing

What is NEN 7512?

NEN 7512:2015. The Dutch standard for the trust basis when patient data is exchanged between care providers. It complements NEN 7510 (ISMS) and NEN 7513 (patient-record logging) and defines three trust levels - laag, midden, hoog - each with concrete identification, authentication, integrity and non-repudiation requirements.

Who needs to comply

  • Hospitals, GP practices and other care providers exchanging patient data
  • Regional Healthcare Information Organisations (RSO) and exchange platforms
  • Suppliers operating exchange gateways (HL7 FHIR, Mitz, Twiin, XDS) for Dutch care
  • Software vendors integrating with LSP / Nictiz services

Key NEN 7512 controls covered by Dazr

Trust-level registerEvery exchange flow tagged laag / midden / hoog with a documented risk basis.
UZI & AGB endpointsIdentifier per exchange endpoint with re-verification on contract renewal.
Mutual TLS registerPKIoverheid certificate inventory with renewal alerts 60 days before expiry.
Qualified time stampsTSA-token capture for hoog-level traffic where evidential value matters.
Per-partner audit trailAppend-only log of every exchange, retained alongside the NEN 7513 patient-access log.
Annual conformance reviewScheduled review per partner with a documented remediation date for deviations.

What auditors look for

A NEN 7512 audit will sample the trust-level register, walk one or two flows end-to-end, verify the mTLS certificates and ask to see the conformance review for each major exchange partner. Dazr surfaces all of this in one workspace.

How Dazr helps with NEN 7512

  • Run NEN 7512 alongside NEN 7510 and NEN 7513 in a single workspace
  • Hold the trust-level register with linked risk assessment per flow
  • Track UZI / AGB codes and PKIoverheid certificates per exchange partner
  • Schedule the annual conformance review per partner
  • Hand the auditor a read-only view or a single-PDF audit trail

Back to the full Dazr Compliance overview › | Sign up free ›

NEN 7512 questions, answered.

What is NEN 7512?

NEN 7512 is the Dutch standard that sets the trust basis for exchanging patient data between care parties. It defines three trust levels (laag, midden, hoog) and prescribes identification, authentication, integrity and non-repudiation requirements at each level.

Do I need NEN 7510 as well?

Yes. NEN 7512 sits on top of NEN 7510 - the underlying ISMS controls live in 7510. Enable both frameworks in the same workspace; we reuse the same evidence wherever they overlap.

Does Dazr handle UZI and AGB identification?

We track the UZI / AGB code per exchange endpoint as part of the partner register and remind you to re-verify on contract renewal. The actual lookup against the central registers is performed by your gateway.

Where is data hosted?

European Union only. AES-256-GCM at rest. Italian entity, EU jurisdiction.

Ready to start your NEN 7512 program?

Free for one user. Pro €29/mo and Enterprise €299/mo are self-serve via Mollie. Custom (from €800/mo) is the only tier on a contract.

Open the portal All frameworks