Odontium security: protection you can rely on

Patient data is valuable. That is why security sits at the centre of everything we do. From secure storage and backups to a switch you do not have to worry about: with Odontium you are working with something you can rely on.

What if something goes wrong?

You only notice security when something happens. Pick a situation and see what is already in place.

A laptop is stolen

Your patient data is on our own servers in a certified data centre in the Netherlands, encrypted with AES-256. You revoke the access of the user on that laptop straight away.

• Two-step verification for extra certainty
• Access revocable the moment someone leaves

An employee leaves

You revoke their access straight away. What that employee viewed before remains on record.

• Access revocable the moment someone leaves
• Every access is logged and can be reviewed

A password gets out

With two-step verification a password alone is not enough to sign in. How strict your passwords are is up to you.

• Two-step verification for extra certainty
• Your own password policy

Data is lost

A backup is made every day, at a different location from the data itself. We test those backups every month, so that restoring actually works.

• Encrypted storage and daily backups
• Daily backups to a separate location, tested monthly.

Support needs to take a look

Our support staff have no access to your records by default. If access is needed in order to help you, we ask for explicit permission and that access is logged.

• Every access is logged and can be reviewed

An incident happens anyway

Then you hear it from us quickly, so that as the controller you can do what the GDPR asks of you, with the terms of the data processing agreement in hand.

• Incidents reported within [24] hours
• A data processing agreement ready to sign

What this certification actually means

Certificates are more than a logo. They mean an independent party has examined our processes in detail.

NEN 7510

NEN 7510 is the Dutch standard for information security in healthcare. It is written specifically for organisations that handle patient data and goes further than general IT security: it sets requirements for how health data is stored, who has access to it, and how incidents are reported.

• Written specifically for the Dutch healthcare sector
• Audited every year by an independent auditor
• Maps directly onto your GDPR obligations

NEN 7510:2024 · Certificate number K-0227561 / 2 · Issued by Kiwa Nederland B.V. (Kiwa) · Valid until 05-01-2029 · certificate (PDF)

ISO 9001

ISO 9001 is the international standard for quality management. It demonstrates that our processes are structured, auditable and aimed at continuous improvement — from software development through to customer support.

• An internationally recognised quality standard
• Continuous improvement of internal processes
• Independently certified and reviewed periodically

ISO 9001:2015 · Certificate number K-0223485 / 1 · Issued by Kiwa Nederland B.V. (Kiwa) · Valid until 13-04-2028 · certificate (PDF)

ISO 27001

ISO 27001 is the international standard for information security and is the foundation NEN 7510 is built on. It demonstrates that information security risks are identified, controlled and monitored as a matter of routine.

• The international basis for information security
• Systematic risk management
• The foundation of the Dutch NEN 7510 standard

ISO 27001:2022 · Certificate number K-0227558 / 2 · Issued by Kiwa Nederland B.V. (Kiwa) · Valid until 05-01-2029 · certificate (PDF)

From practice to backup: encrypted at every step

Your patient data takes the same route every day. At every point along it, who can reach the data and how it is protected is written down.

In the practice

Your team works in Odontium. Only authorised staff see a record. (Role-based access)

In the data centre

On our own servers, in a certified InterDC data centre in the Netherlands. (AES-256)

In the backup

Daily backups to a separate location, tested monthly. ([30] days back)

Jointly responsible for your patient data

Under the GDPR your practice remains the controller of the patient data. Odontium processes that data on your behalf. We set out exactly who does what.

What we take care of

• Encrypted storage and daily backups
• Physical security of the data centre
• Independent audits and certification
• Incidents reported within [24] hours
• A data processing agreement ready to sign

What you take care of

• Who on your team gets access
• Revoking access when someone leaves
• Your own password policy
• What you record in the patient file

Questions about security

Are backups made automatically?

Yes. Odontium makes automatic daily backups to a separate location, and tests them monthly to guarantee they can be restored.

Who has access to my data?

Access is set per role within your practice: a front-desk employee sees the schedule, for example, but no financial information. Our own support staff have no access by default — only with your explicit permission, and every access is logged.

What happens if Odontium has a security incident?

Incidents are reported to your practice within 24 hours, in line with the terms of the data processing agreement.

How secure is the switch itself?

We guide the entire data migration, encrypted and step by step, so that no data is lost or sent unprotected.

Does Odontium have a data processing agreement?

Yes. A data processing agreement is ready and can be signed as soon as your subscription starts.

What happens to my data if I stop using Odontium?

At your request your data is either handed over or securely deleted, within the period agreed in the data processing agreement.

Ready for a secure future for your practice?

Find out how Odontium supports your practice with secure software, personal guidance, and a switch you do not have to worry about.

Quick Links

Disciplines

Contact

Certified

KIWA-certified for information security and quality management.

© 2026 TSE B.V. All rights reserved.