PCDCareHub
INDEPENDENT LAYER

Compliance you keep proving

An audit is a moment; oversight is a state. ComplianceOS keeps track of whether an organisation still meets what it agreed to, instead of reconstructing that once a year.

Book a conversationExplore the ecosystem
WHAT COMPLIANCEOS IS

From annual reconstruction to a live picture

Three things shift once compliance becomes a process rather than a project.

Standards as a working document

NIS2 (the Dutch Cyberbeveiligingswet), NEN 7510, ISO 27001 and the GDPR are translated into concrete controls with an owner and a frequency; the EHDS requirements follow as they come into force.

Testing that repeats

Controls are re-tested, so gaps surface when they appear rather than at the next audit.

Evidence that is ready

Provability grows alongside the work, so a question from an auditor or a customer does not turn into a search.
WHAT IT DOES

The work that now lives in spreadsheets

Four tasks that sit scattered across documents, folders and people at almost every health-tech vendor.

  • Tracking requirements

    Changing standards and legislation are translated into what has to change in your organisation, concretely.

  • Flagging

    Expired controls, lapsed agreements and open actions raise their hand, instead of surfacing when it is already too late.

  • A file in order

    Policy, evidence and decisions sit together, with a trail back to who established what, and when.

  • Accountability

    Reporting to your board, customers and regulators comes from the same source as daily practice.

WHERE THE EDGES ARE

What ComplianceOS is not

This layer deliberately holds its own position in the ecosystem. Three things that come with that.

  • Not part of PCDThe intellectual property of ComplianceOS sits outside the firm, with an independent legal entity. That is deliberate: a check is worth less when the checker has a stake.
  • Not a certificateComplianceOS shows where you stand. Certification is issued by a certifying body — a different trade and a different signature.
  • Not a transfer of your responsibilityThe organisation remains accountable for compliance. The platform shows where you stand; acting on it stays human work.

Where we stand ourselves

What we ask of others, we show about ourselves. Our own certification tracks are under way; while they are under way, that is what we call them.

  • NEN 7510 in preparation (Q1 2027)
  • ISO 27001 in preparation (Q1 2027)
  • GDPR-compliant
LET'S TALK

Does your compliance live in folders?

Then you know the pattern: it is all correct, but proving it takes weeks. We are happy to show how that can work differently.

Book a conversationTrust & Security