Privacy isn't an add-on here
You work with the most sensitive data there is – your patients' health data. That's why security at TheraNext isn't a checkbox in a brochure but built into the architecture: from field encryption and tenant separation at the database level to a complete audit log. And because health data belongs in Germany, we host here – and use self-hosted, third-party-free building blocks even for our own website.
Datenschutz-Architektur
DSGVO · Art. 9
Server in Deutschland
Kein außereuropäisches Hosting
Feldverschlüsselung
AES-256 für Gesundheitsdaten
Mandantentrennung
Row-Level-Security auf DB-Ebene
2-Faktor & Audit-Log
Zugriffe lückenlos protokolliert
Servers in Germany
Your practice and patient data are processed on servers in Germany – not with non-European providers.
Field encryption
Sensitive health data (Art. 9 GDPR) is stored field-encrypted. Even in the unlikely event of database access, the contents stay protected.
Tenant separation
Every practice is an isolated tenant. Separation is enforced at the database level – one practice can never see another’s data.
Two-factor authentication
Two-factor login is mandatory for privileged roles. Together with rate limiting and account lockout it protects against unauthorised access.
Complete audit log
Security- and privacy-relevant events are logged tamper-evidently – traceable for audits and the worst case.
TI-capable via RISE
The connection to the telematics infrastructure runs via the established partner RISE – future-proof for the 2026/2027 mandates.
Questions about security & privacy
Is TheraNext GDPR-compliant?
TheraNext is built privacy-first: servers in Germany, field encryption, tenant separation, audit log and a data-processing agreement are part of it.
Where is my data stored?
On servers in Germany. No health data is processed with non-European cloud providers.
Do I get a data-processing agreement?
Yes, a data-processing agreement under Art. 28 GDPR is part of the collaboration.
What happens to my data if I cancel?
Your data belongs to you. You receive an export in open formats; afterwards the data is deleted according to the agreed deletion policy.
Practice software you can trust with your data
Try it free, no credit card, cancel anytime. Live in days – with a guided migration from your current software.