Action in the taxi: Check out this awesome landing page!

How Aivory Achieved ISO 27001 and NEN 7510 in Three Months with Zero Findings

How healthcare software startup Aivory achieved ISO 27001 and NEN 7510 in 3 months. Thanks to Fendix and Tidal Control, this only took 8 hours per week, and the audit resulted in 0 findings!

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Highlights of this success story

0 findings
Certified immediately without a single finding.
Double certification
ISO 27001 and NEN 7510.
Minimal burden
Only 8 hours of internal time investment per week.
Client
Aivory
Standards
Involved consultants

The reason

This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

Dental Practices Rely on Disparate Tools, Aivory is Building the Alternative

Before Ties Verberne wrote a single line of code, he listened. He spoke with dentists across the country and consistently observed the same issues: patient data, records, schedules, and communication were all disconnected. There was no cohesive system, no automation, and virtually nothing happening in the field of AI. Administrative tasks that had been automated in other sectors for years were still being done manually in dental practices.

For that, he built Aivory with co-founder Sara de Jong. A single AI platform that integrates scheduling, patient records, treatment plans, dashboards, and patient communication into one system, so dentists have more time for patients and practices run more efficiently.

Compliance Provides Access to the Healthcare Market

For healthcare software, certification is not a mere formality. Patient data, records, and schedules all flow through the platform. Without ISO 27001 and NEN 7510 in hand, you simply won't make it in healthcare. Ties knew this from day one. "I just knew I had to get ISO 27001 and NEN 7510. The challenge wasn't whether we would do it, but how we would approach it so it wouldn't hold us back for months."

For a founder who attends an average of ten meetings a day, that was a serious consideration. Fortunately, Sara de Jong, responsible for the technical side of the platform, had already properly implemented security by design. This laid a solid foundation before the process began.

Speed is Fine, But Not at the Expense of Substance

In the American market, some platforms now promise compliance within four weeks. For Ties, that was precisely a warning sign. "I saw four weeks, and in my opinion, that's just too fast. Then it's rushed. You don't truly experience the processes, you don't understand your risks, and the auditor doesn't have room to critically review it. I even heard that some auditors in America don't even look and just certify you."

Mathijs Oppelaar, Fendix's operational director, recognizes this pattern. When a platform promises you'll be compliant in four weeks, something in the chain is going wrong: the evidence is pre-filled, the auditor doesn't ask proper questions, or both. The result is a certificate without substance. For a healthcare software company, that's not a theoretical risk.

The Choice for Tidal Control and Fendix

Aivory prioritizes data sovereignty and hosting in the Netherlands. An American player like Vanta or Drata felt like a mismatch in that regard. So, the search for a partner began closer to home, and Ties found one through a chance encounter with Dennis van de Wiel, founder of Tidal Control, at a startup event. Shortly after, when Ties posted on LinkedIn that he was looking for help with ISO 27001 and NEN 7510, Tidal Control responded quickly and personally. That approach was decisive. Tidal Control as a compliance platform and Fendix as a consultancy partner for expert guidance. "The pace really surprised me. I hear from others that such a process usually takes six months to a year. The combination of Tidal Control, Fendix's guidance, and about eight hours per week from our side ensured it was completed in three months."

Download the NEN 7510 checklist

The new NEN 7510:2024 requirements clearly mapped out, including all Annex A components, directly applicable and free to download as a PDF.

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Our approach

This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

A platform for structure, a consultant for expert project leadership

Tidal Control provided the policy templates and structure, allowing Ties to immediately add what was relevant to Aivory. Fendix offered expert guidance to make sharp choices regarding scope, risks, and evidence, and also conducted the internal audit, through an independent team member, to verify if those choices held up. The policy wasn't written to satisfy an auditor, but to truly embody the processes. That sounds obvious, but it's precisely where many projects go wrong.

The connection with Jurre

A three-month project hinges on the collaboration between client and consultant. For Aivory, this was excellent with Jurre 't Lam, Security Officer at Fendix, who provided the expert guidance. "The collaboration between Ties, Sara, and me was seamless. The most important thing is to make and keep agreements. There was quick mutual trust and transparency from both sides," says Jurre.

Ties recognizes this. "The connection with Jurre truly made a difference. He takes the time to understand how we work and adapts his approach accordingly. This feels personal, not like a standard process they pull out of a drawer for every client." Aivory is building a healthcare software platform with AI at its core, with integrations to Vecozo and VisiQuick. This requires a partner who thinks along about what is relevant for your specific situation and omits what isn't.

This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare
  • 01

  • 02

  • 03

  • 04

  • 05

  • 06

  • 07

  • 08

This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

Next-Gen Consultant speaking

"The collaboration between Ties, Sara, and me was seamless. The most important thing is to make and keep agreements. There was quick mutual trust and transparency from both sides."

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Jurre
't Lam
Information Security Consultant & Employer Branding and Marketing Specialist

The results

This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

Zero findings

The external audit is when the real work truly becomes visible. Auditors almost always find something—four to six findings are normal in the market, and these require corrective actions before the certificate is issued. For Aivory: zero findings. This result can be directly attributed to the approach taken for the project. Those who write policies because the processes are sound, and not just to satisfy an auditor, approach the audit differently. The combination of Tidal Control's structure and Fendix's expert guidance ensured that Aivory not only met the standard on paper but also in practice.

''If other founders ask me how we managed our certification so efficiently, my answer is short: go to Tidal Control for the structure and bring in Fendix for the expert consultancy. It's the ideal combination.''

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Ties Verberne
Co-Founder
Twee mensen met koffiekopjes in een kantoor met een bruine leren bank en planten.
''If other founders ask me how we managed our certification so efficiently, my answer is short: go to Tidal Control for the structure and bring in Fendix for the expert consultancy. It's the ideal combination.''

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Ties Verberne
Co-Founder
This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

The Ongoing Collaboration

The journey doesn't stop after certification. Ties uses Tidal Control daily as his single source of truth for compliance tasks. If a substantive question arises, he taps into a few hours of Fendix support. When someone from his network asks how he tackled this, Ties's answer is short: go to Tidal Control and engage Fendix for consultancy.

Curious how this works for your organization?
Three months instead of a year. Eight hours a week instead of a full-time project. An external audit with zero findings.

Want to know what a similar process looks like for your company? Schedule a no-obligation consultation below!

Involved consultants

Jurre
't Lam
Information Security Consultant & Employer Branding and Marketing Specialist
This is a body. Lorem ipsum by sit amet, consecteur adipising elite. Suspendisse varius enim in eros elementum tristique. German course, mi quis viverra ornare

Kilian Houthuijzen

Commercial Manager

Kilian

Houthuijzen

Commercial Manager & Partner

Three months. Eight hours a week. Zero findings. Do you want to achieve this for your organization too?

Contact us for a free introduction.

Heading 1

Heading 2

Heading 3

Heading 4

Heading 5
Heading 6

Lorem ipsum by sit amet, consectetur adipiscing elit, sed do eusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Dis aute irure door in reprehenderit in voluptate velit se cillum dolore eu fugiat nulla pariatur.

Block quote

Ordered list

  1. Item 1
  2. Item 2
  3. Item 3

Unordered list

  • Item A
  • Item B
  • Item C

Text link

Bold text

Emphasis

Superscript

Subscript

Other success stories

ICT & Media
TAGGRS

How TAGGRS implemented ISO 27001 in 4 months

Healthcare
GGZ Western Noord-Brabant

How GGZ Westelijk Noord-Brabant structured information security

Enterprise
Heras

Heras achieves ISO 27001 certification within one year with worry-free implementation

Enterprise
Total Energies

How Total Energies Charging Solutions Netherlands obtained more than one certificate with the implementation of ISO 27001

ICT & Media
NO

Internal Audits: A Fresh Perspective on ISO 27001 at NOBEARS

Healthcare
Stap & Care Group

Towards ISO 27001 and NEN 7510 certification with Stap & Care Group

ICT & Media
Now Online

NowOnline's Choice for an Interim Security Officer from Fendix

ICT & Media
Nedscaper

With Nedscaper to an ISO 9001 and ISO 27001 certificate in 12 weeks

ICT & Media
SPL

From start-up to ISO 27001 and NEN 7510 certificate in 6 months

Enterprise
Goose VPN

Interactive cybersecurity week at GOOSE VPN