Healthcare & EHR GDPR & NEN 7510 Custom integration

Custom Incura integration

Appfront builds custom integrations with Incura EHR, so client data, appointments, invoicing and treatment information flow securely between Incura and your own software, portal or administration. You avoid duplicate work and re-typing, while your healthcare data is processed in line with the GDPR and the NEN 7510 and ISO 27001 healthcare standards. That way you spend more time on your clients and less on administration.

What is an Incura integration?

Incura is a web-based EHR (electronic health record) and practice management software for healthcare. It is used by healthcare professionals in areas such as mental health care, allied health and youth care, and brings the client file, agenda, invoicing and treatment information together in one system. Many practices want Incura to work with their own web application, client portal or administration, and that requires an integration.

A custom Incura integration means, in practice: securely exchanging client and case data between Incura and your own systems, synchronising appointments with a schedule or client portal, supporting claim flows to VECOZO, and bringing treatment or care-pathway information into your other processes. Because this is health data, the emphasis is on careful data handling, data minimisation and clear agreements about who may see which data.

Incura is developed by Health Cloud Initiative (HCI); you can read more about the platform on the official Incura website. Appfront does not develop Incura itself, but builds the integration to it. We align the integration options with your Incura environment and your working processes, so the integration remains reliable and your own team can understand how the data flows.

Client record integration

Client and case data from Incura available in your own application or portal, without manual re-entry. Together we determine which fields are exchanged and apply data minimisation, so that only the data genuinely needed flows across.

Synchronised agenda

Appointments from the Incura agenda synchronised with a planning tool, client portal or online booking module. Changes remain consistent, so practitioners and clients always work from the same schedule.

€

Secure to care standards

Every integration is built with attention to the GDPR and the healthcare standards NEN 7510 and ISO 27001. Encrypted connections, role-based access and documented data flows form the basis for responsible processing of medical data.

Our development process for Incura integrations

We work to a proven methodology that removes uncertainty early and delivers a stable integration. From an initial analysis of your care processes and the desired data flows through to go-live and ongoing management, every step is aimed at an integration that handles client data with care and that your team can understand and trust.

1
Analysis & scope

We map out which data needs to flow between Incura and your systems, which integration options your Incura environment offers, and which privacy requirements apply to the health data involved.

2
Architecture

We design the integration architecture, choose secure authentication and encryption, and establish a strategy for error handling and data minimisation.

3
Development

Implementation with automated tests, structured logging and monitoring. You see working components along the way, so you can steer early.

4
Go-live & management

Controlled go-live with data validation and a safety net, followed by ongoing maintenance, monitoring and further development.

What an Incura integration delivers in practice

Every Incura integration is set up specifically for your care process, your discipline and the adjacent systems. Below are the features we most often deliver for care providers who use Incura as the core of their practice administration.

API and custom integration

A reliable integration layer between Incura and your own application, portal or administration. We make use of the integration options Incura provides, with clear error handling and logging, so that data flows consistently and verifiably between the systems.

Client and case data

Make client details and case information from Incura available in your own systems, or write them back securely. We apply data minimisation and record per field who may view which data, so that the processing of care data demonstrably takes place with care.

Calendar & appointments

Have the Incura agenda work together with an online booking module, planning tool or client portal. Appointments, changes and cancellations remain synchronised, so practitioners and clients always work from the same, up-to-date schedule.

Declarations via VECOZO

Support for declaration and invoicing flows around Incura, including exchange with VECOZO. We ensure the data required for declarations is compiled and passed on reliably, with logging so you can quickly trace discrepancies.

Treatment pathways & ROM

Connect treatment and episode information from Incura with your own processes, dashboards or questionnaire tooling around ROM (Routine Outcome Monitoring). This brings outcomes and progress together, without clinicians having to record data twice.

Care Communication & Documents

Secure exchange of documents and messages related to the record, such as letters, referrals or reports. We connect to secure communication channels commonly used in healthcare, so sensitive information is exchanged encrypted and traceable.

Applications by healthcare sector

An Incura integration looks different in each care sector. Below are several situations we encounter often, each with attention to the specific data flows, the applicable standards and the careful handling of medical data.

CRM

Mental health practices

Mental health providers who use Incura for records, treatment pathways and claims, and who want to connect it to a client portal, questionnaire tooling or their own software. We take the sensitivity of mental health data into account and set up the exchange carefully. See also our API integrations.

Physiotherapy & speech therapy

Physiotherapy, dietetics, occupational therapy and speech therapy practices that use Incura for scheduling, records and billing. Think of an integration with an online appointment module, an exercise or measurement tool, or your own administration, so practitioners spend less time retyping.

Youth Care

Youth care providers who work with the message flows surrounding the Youth Act and who want to connect Incura with municipal or chain-partner processes. We ensure the data involved is exchanged reliably and demonstrably securely, in line with the requirements of this sector.

Multidisciplinary care

Organisations where multiple disciplines collaborate within one record and where Incura needs to connect with additional software or an overarching portal. We map the data flows between the systems and build an integration that supports working together in a single record. Also read about middleware.

Technology we use

We build Incura integrations using the integration options the platform offers, combined with the backend stack that suits you. The exact choice depends on your Incura environment and the systems being connected, always with secure connections and attention to healthcare standards, so your own team can manage or further develop the integration.

Incura integration options REST API & webhooks OAuth 2.0 / API tokens Node.js / Python / PHP / .NET VECOZO claims flows Client portal integration Calendar synchronisation Secure healthcare communication NEN 7510 / ISO 27001 approach Encryption in transit (TLS 1.2+) Role-based access Data minimisation Error handling & retries Logging & monitoring Audit logs GitHub Actions

Why choose Appfront for your Incura integration?

Appfront has extensive experience building API integrations for a wide range of organisations in the Netherlands. We always start with a thorough analysis of your existing systems and processes. An integration should not only work technically but also add practical value to your care processes.

For every integration, we write clear documentation and make sure your own team, or any future supplier, can understand and manage it. No black box, just transparent code and clear agreements on monitoring, alerting and maintenance.

You work with a dedicated point of contact who understands both the technical and the functional side. This keeps communication short, prevents misunderstandings and speeds up decisions when choices need to be made during development.

See also our wider services around API integrations, middleware, custom software development and web app development.

Do you also work with other healthcare systems? We build integrations with Intramed, VECOZO and Zorgmail, among others. You'll find a full overview on our integrations page.

  • Experience with API integrations for healthcare providers in the Netherlands
  • Privacy and healthcare standards (GDPR, NEN 7510, ISO 27001) as the starting point
  • Clear documentation your team can read and manage
  • A dedicated point of contact and ongoing management, no black box

Security and privacy in Incura integrations

An Incura integration processes medical data, which is special category personal data under the GDPR. Appfront therefore builds with security and privacy as the starting point, following the OWASP ASVS and the healthcare standards NEN 7510 and ISO 27001 for information security. Among other things, that means data minimisation, encrypted connections, role-based access, secrets in secure vaults and regular audits of data flows.

We document the data flows and integration points so your record of processing activities is complete and you can demonstrably comply with the GDPR. We record which data is exchanged, for what purpose and under which rights, and set up audit logs so data flows remain traceable. That way, you can show clients and regulators that you handle medical data responsibly.

More on our security approach: information security policy and CVD policy.

  • GDPR-compliant processing of special category personal data
  • Approach according to NEN 7510 and ISO 27001
  • Data minimisation: only what is truly necessary
  • Encryption in transit (TLS 1.2+) and at rest
  • Role-based access and least-privilege principles
  • Audit logs with traceable data flows
  • Monitoring and alerting for anomalies
  • Documentation for your record of processing activities

Frequently asked questions about Incura integrations

Answers to the questions we receive most often about integrations with the Incura EHR.

An Incura integration is a technical link between the Incura EHR and another system, for example your own web application, a client portal, a scheduling tool or your accounting software. Through an integration, healthcare data such as client details, appointments and treatment information is exchanged securely, so you don't have to retype it by hand. Appfront builds such integrations to order and tailors them to your work processes, always with privacy and Incura's healthcare requirements as the starting point.

Incura is used by healthcare professionals in mental health care (GGZ), allied health (such as physiotherapy, dietetics, speech therapy, occupational therapy and exercise therapy) and youth care, among others. An integration is possible in all of these sectors. Together with you, we look at which data flows are relevant, such as client records, appointments, claims or treatment pathways, and set up the integration around the rules and standards that apply in your discipline.

Incura supports several ways of exchanging data and integrating with external parties. Which route is available depends on your Incura environment and the data you want to exchange. Appfront first analyses which integration options exist, checks these with HCI (the supplier of Incura) where necessary, and then builds a reliable integration layer with error handling and logging. This keeps the exchange manageable and transparent.

We work with the integration options Incura offers, combined with the backend stack that suits you, for example Node.js, Python, PHP or .NET. For exchanging healthcare data, we apply healthcare standards and secure connections where relevant. Authentication, encryption in transit and structured error handling are a standard part of the integration, so it meets the requirements that apply in healthcare.

Lead time depends on the complexity of the data flows, the number of systems to connect, the synchronisation you need and the coordination required with the Incura vendor. A simple exchange can be delivered faster than an integration that touches several systems and business logic. After an initial discovery call, we map out the scope and give you a realistic estimate, without committing to fixed deadlines.

Care data is highly sensitive, so security and privacy come first. Appfront builds integrations that comply with the GDPR and take into account the standards that apply in healthcare, such as NEN 7510 and ISO 27001 for information security. We apply data minimisation, encrypt data in transit, work with role-based access and document the data flows for your record of processing activities. That way, you can demonstrably handle medical data responsibly.

Yes. Appfront regularly takes over existing integrations, even if they were originally set up by another party. We review the integration, the data flows, the error handling and the logging, document the current set-up and propose improvements. From there, we can handle changes, extensions, monitoring and ongoing management, so the integration remains reliable as your practice grows.

Incura is an existing EHR platform from Health Cloud Initiative (HCI). Appfront does not develop Incura, but we build integrations between Incura and your other software, portals or administration. This way, you combine the strengths of your EHR with your own processes, without duplicate work. Would you rather have new software built that works alongside Incura? That's possible too, and we can design the integration from the outset.

Ready to build your Incura integration?

Tell us which data you want to exchange between Incura and your own systems, such as client records, scheduling, claims or treatment pathways, and we'll gladly help you design a secure, GDPR-compliant integration. Book a no-obligation first conversation via our contact page to get a clear picture of what's possible.

Edit content