Healthcare software EHR integration GDPR & NEN 7510

Custom Intramed integration development

Appfront builds custom integrations with Intramed, the Dutch practice management software and EHR for allied healthcare. Using the online services and API keys of Intramed Online, we securely connect your patient portal, intake app, diary or own application to the EHR. You enter data just once, appointments and treatment episodes stay in sync, and you work in line with the GDPR and NEN 7510.

What is an Intramed integration?

Intramed is practice management software with an integrated electronic health record (EHR) for allied health and care professions. It brings patient data, treatment episodes, the diary, claims and invoicing together in one environment. Intramed is used in physiotherapy, exercise therapy, occupational therapy, speech therapy, dietetics, podiatry and mental health care, among others.

In practice, a custom integration means letting your own patient portal, intake app or web application communicate with Intramed via its online services, where you create an API key or token per employee and select Intramed as your EHR supplier. This allows appointments, intake data or administrative data, for example, to flow securely back and forth without double entry. Alongside Intramed's ready-made integrations, we build the connection that isn't available as standard.

Intramed already offers several standard integrations, such as ZorgDomein, ZorgMail, Twinfield and Mollie. An overview is available on the Intramed integrations page. Appfront builds on those online services and tailors data flows, logic and error handling to your actual practice processes, with attention to privacy and information security.

One patient record

Patient data, treatment episodes and measurements are held together in Intramed's EHR. An integration lets a portal or app connect to it, so data no longer has to be entered twice and the record remains the single source of truth.

Calendar & appointments

Intramed's diary manages appointments and scheduling. Through an integration, an online booking module or patient portal can view or request appointments, so scheduling stays consistent in one place.

€

Billing & invoicing

Intramed handles claims and invoicing and integrates with Twinfield for accounting and Mollie for payments, among others. A custom integration lets additional administrative flows connect to these.

Our development process for Intramed integrations

We work to a proven methodology that removes uncertainty early and delivers a stable integration. From an initial analysis of your practice processes, your Intramed environment and the available online services, through to go-live and ongoing management, every step is aimed at an integration that your practice can understand and trust.

1
Analysis & scope

We map out which data flows you want to connect, which online services your Intramed environment offers, and which privacy and security requirements apply to your professional group.

2
Architecture

We design the integration architecture, set up API keys or tokens per employee, and draw up a strategy for error handling and logging.

3
Development

Implementation with automated tests, structured logging and monitoring. You will see working versions along the way.

4
Go-live & management

Controlled go-live with data validation and safeguards, followed by ongoing management, monitoring and further development.

What an Intramed integration actually delivers

Every Intramed integration is set up specifically for your practice, your way of working and the adjacent systems. Below are the features we most often deliver for practices that use Intramed as the core of their care administration.

Online services & API keys

We connect via the online services of Intramed Online, creating an API key or token per employee and selecting Intramed as your EHR provider. This lets your own app or portal connect securely and traceably with the record, with scoped access per integration.

Calendar & appointments

Connect an online appointment module or patient portal to the Intramed calendar, so appointments are managed in one place. Patients can see availability or request an appointment, and the schedule stays consistent with the EHR.

Treatment episode & EHR data

Within the treatment episode, the therapist records observations, goals and measurements. An integration lets relevant data from an intake app or measurement tool flow in securely, so the record stays complete without duplicate entry. We process only what is strictly necessary.

Billing & invoicing

Intramed handles claims and invoicing and integrates with, among others, Twinfield for bookkeeping and Mollie for payments. We connect additional administrative flows to this, so your financial administration runs smoothly.

Care communication

Intramed supports secure care communication via ZorgDomein for referrals and ZorgMail for securely exchanging reports with GPs and referrers. We connect additional communication flows to these existing, secure channels.

Exercise programmes

Intramed has a Physitrack integration from within the treatment episode, through which the therapist creates exercise programmes for the patient. We connect additional exercise or self-management applications to the record in a similar way.

Typical applications by professional group

An Intramed integration differs by professional group and practice. We often see a number of recurring patterns, and for each of these we have a proven setup with attention to the right data flows, privacy and information security.

EPD

Physiotherapy

Physiotherapy practices that use Intramed for the EHR, scheduling and claims. For example, an integration can connect an online intake, an appointment module or a measurement tool to the treatment episode, so duplicate entry disappears. See also our API integrations.

Multidisciplinary practice

Practices where multiple disciplines work together, for example physiotherapy, exercise therapy and occupational therapy under one roof. An integration streamlines shared scheduling and administration between Intramed and a central portal, with scoped access per employee and per discipline.

Speech therapy & dietetics

Speech and language therapy and dietetics practices that work with Intramed and want to support clients remotely. Think of a dedicated client portal or questionnaire app that connects to the record, so that intake details and reports reach Intramed securely and without retyping.

Mental health & allied health

Mental health and broader allied health practices, including podiatry and occupational therapy, that use Intramed for record keeping and claims. An integration lets your own portal or application connect securely to the EHR, with extra attention to the sensitivity of the data and least-privilege permissions.

Technology we use

We build Intramed integrations on the online services and API keys of Intramed Online, combined with the backend stack that suits you. The precise choice depends on your Intramed environment and the systems you want to connect, so that your practice or provider can manage or further develop the integration.

Intramed Online online services API keys & tokens per employee EHR data & treatment episode Calendar & appointments Claims & invoicing ZorgDomein & ZorgMail Twinfield bookkeeping Mollie payments Physitrack exercise programmes Node.js / Python / PHP / .NET Custom middleware NEN 7510 & ISO 27001 GDPR by design Secure vaults & key rotation Logging & monitoring Error handling & retries

Why choose Appfront for your Intramed integration?

Appfront has extensive experience building API integrations for a wide range of organisations in the Netherlands. We always start with a thorough analysis of your existing systems and processes. An integration should not only work technically, but also add practical value to the way you work.

With every integration, we write clear documentation and make sure your own practice, or any future supplier, can understand and manage it. No black box: transparent code and clear agreements on monitoring, alerting and maintenance.

You work with a dedicated point of contact who understands both the technical and the functional side. This keeps communication short, prevents misunderstandings and speeds up decisions when choices need to be made during development.

See also our wider services around API integrations, middleware, custom software and web app development, or browse all of our integrations.

  • Experience with integrations on Intramed Online services
  • Experienced with healthcare software, EHR data and sensitive patient information
  • Works in line with GDPR, with attention to NEN 7510 and ISO 27001
  • Secure by default: API keys in secure vaults, scoped and least-privilege access
  • Structured error handling and retry mechanisms
  • Comprehensive logging and monitoring from day one
  • Clear documentation that your practice can read and manage
  • A fixed point of contact, no account managers passed around
  • Ongoing maintenance and proactive further development
  • A way of working tailored to your existing healthcare IT landscape

Security and privacy in Intramed integrations

An Intramed integration processes medical data and other special category personal data. That demands the utmost care. Appfront builds according to the OWASP ASVS: API keys and tokens in secure vaults, encrypted connections, scoped and least-privilege access per employee, and regular audits of data flows. We only process the data that is strictly necessary (data minimisation).

Alongside GDPR, Intramed complies with NEN 7510 and ISO 27001 for information security in healthcare. We document the data flows and the integration configuration, so your record of processing activities is complete and you can demonstrably comply with the GDPR. This keeps responsibility for medical data clearly assigned and traceable.

More on our security approach: information security policy and CVD policy.

  • GDPR-compliant processing of medical data and data minimisation
  • Encryption in transit (TLS 1.2+) and at rest
  • Role-based access and least-privilege principles
  • Audit logs with traceable data flows
  • Automatic retries and dead-letter queues
  • Monitoring and alerting for anomalies
  • Secrets management in line with best practice
  • Documentation for your record of processing activities and alignment with NEN 7510

Frequently asked questions about Intramed integrations

Answers to the questions we are asked most often about Intramed integrations.

An Intramed integration is a technical link between Intramed and another system, such as a patient portal, intake app, calendar, accounting package or your own web application. Intramed offers online services for this, where you create an API key or token per employee and select Intramed as your EHR supplier. Through this integration, appointments, treatment episodes and administrative data can be exchanged securely. An integration can be simple (a single data flow) or extensive, involving multiple systems and automated processes.

An integration makes sense when you are entering data twice between Intramed and another system, or when you want your own app, portal or website to communicate with the EHR. Intramed already offers ready-made integrations such as ZorgDomein, ZorgMail, Twinfield and Mollie. If you have a requirement that falls outside these, for example a custom intake form or your own client portal, we will build an integration on Intramed's existing online services.

Integrations run through Intramed Online services, where you activate an API key or token per member of staff. During the intake, we review your exact Intramed environment and which online services are available for your profession. Based on that, we determine which data flows are technically possible and how best to set up the integration.

We work with the online services and API keys of Intramed Online, combined with the backend stack that suits you: Node.js, Python, PHP or .NET. Authentication uses the token or API key you create per member of staff in Intramed. Where needed, we use middleware to process data flows, with logging, monitoring and error handling, so the integration stays verifiable and maintainable.

Costs depend on the complexity of the data flows, the number of systems to connect, how often synchronisation is required and the amount of custom logic involved. Ongoing maintenance, monitoring and support also play a part. We first map out your situation without obligation, then provide a clear quote so you know what to expect up front.

Yes. Intramed processes medical and patient data and complies with NEN 7510 and ISO 27001 for information security, in addition to the GDPR. Appfront builds integrations according to the OWASP ASVS: API keys and tokens in secure vaults, encrypted connections, scoped access and least-privilege rights. We only process the data that is strictly necessary and document the data flows, so your record of processing activities stays complete and you can demonstrate GDPR compliance.

Yes. Appfront regularly takes over existing integrations, including those set up by another party. We review the integration, the token configuration, the data flows and the error handling, document the current setup and propose improvements. From then on, we can handle changes, extensions, monitoring and timely rotation of API keys.

Intramed is used by a wide range of allied health and care professionals, including physiotherapy, exercise therapy, occupational therapy, speech and language therapy, dietetics, podiatry and mental health care. An integration suits both solo practices and larger, multidisciplinary practices. We tailor the integration to your profession, your way of working and the online services available for your Intramed environment.

Ready to build your Intramed integration?

Tell us which data flows you want to connect and which portal, app or system Intramed needs to work with. We are happy to advise on online services, privacy and information security. In a no-obligation first conversation, you will get a clear picture of what is possible for your practice.

Edit content