REST API

Developer portal ›

SecuMailer has a REST API for sending secure emails. Both the GDPR and the NTA 7516 functionality are fully accessible via this API.

The API is documented with OpenAPI specification 3.0.1.

The REST API has webhook functionality, which means that the SecuMailer platform can communicate email events with an HTTPS endpoint of the sender.

SMTP API

The SMTP API is usually the simplest integration option for many backend applications because backend applications often have a provision for an SMTP client on board.

We have successfully integrated for customers with Salesforce, SAP and Centric. We have also successfully integrated with patient file systems such as Medisoft Dossier Manager.

GraphQL API

The SecuMailer platform offers insight into email events. This can be done on the basis of a (push) webhook call (see REST API above) and on the basis of a (pull) GraphQL endpoint.

Get a Demo

Name(Vereist)

Contact Sales

Your Name(Vereist)

NTA 7516 compliance — secure email that meets the highest Dutch standard

Protect sensitive data, ensure legal validity, and keep workflows simple for healthcare, municipalities, and public services.

NTA 7516 sets the standard for securely emailing sensitive data in the Netherlands, from medical records to citizen information. SecuMailer ensures full compliance — without portals, complexity, or workflow disruption. Built on privacy by design and security by default, it’s the simplest way to meet NTA 7516 while keeping email effortless.

Book a free GDPR compliance walkthrough
Contact Sales
NTA7516

What is NTA 7516?

The Dutch Technical Agreement (NTA) 7516 is a national standard for the secure exchange of sensitive information via email. Developed with the Ministry of Health, Welfare and Sport (VWS), NEN, VNG, and security technology providers, it sets technical, organizational, and legal requirements to ensure safe and verifiable delivery.

The goal:

  • Minimize the risk of data breaches

  • Verify recipients before delivering sensitive data

  • Provide a legally demonstrable proof of secure delivery

The Goal

Minimize the risk of data breaches

Verify recipients before delivering sensitive data

Provide a legally demonstrable proof of secure delivery

Who needs to comply?

NTA 7516 applies to organizations in the public domain and healthcare sector that handle sensitive or medical data via email. Examples include:

  • Healthcare providers — hospitals, clinics, GGZ institutions
  • Municipalities & public services
  • Youth care institutions
  • Judiciary & legal bodies
  • Safe Home & probation services
  • Government agencies & ministries

The challenges of NTA 7516 compliance

Many organizations struggle to meet NTA 7516 because traditional solutions are outdated or user-unfriendly:

  • Complex workflows: Messaging portals and pick-up links create friction for recipients.

  • Low adoption: Citizens and patients resist cumbersome processes.

  • Repeated authentication requests: Leads to frustration and support calls.

  • Interoperability gaps: Secure email providers often don’t talk to each other.

How SecuMailer helps

  • Direct inbox delivery

    no portals, no pick-up links.

  • One-time 2FA every 90 days

    less friction for recipients.

  • Encryption by default

    no decision-making for staff.

  • Interoperability built in

    works with Zivver, ZorgMail, and judiciary systems.

  • Privacy by design

    automatic deletion of content after delivery.

Key requirements of NTA 7516

To comply, your secure email solution must provide:

  • End-to-end encryption for all messages

  • Recipient authentication via two-factor authentication (2FA)

  • Inbox delivery without portals

  • Interoperability between providers

  • Minimal user disruption (max 4 authentication prompts/year)

  • Secure infrastructure & logging for legal proof

Technical & Legal Snapshot

Full end-to-end encryption using modern standards.

SMS-based 2FA; one prompt every 90 days.

Timestamped delivery records available for legal defense.

Works seamlessly with other certified secure email services.

Deletes content after delivery; only keeps proof-of-delivery metadata.

Why choose SecuMailer for NTA 7516 compliance?

  • Fully certified under NTA 7516:2020.

  • User-friendly — send secure email as easily as regular email.

  • Compatible with other NTA 7516-certified providers.

  • Security by default — every message is sent securely without extra clicks.

  • Proven in government & healthcare — trusted by ministries, municipalities, and care institutions.

Future of NTA 7516

Compliance expectations are evolving. Authorities are tightening standards and expanding enforcement. SecuMailer ensures you stay ahead of these changes, giving you a future-proof platform that meets today’s requirements and tomorrow’s regulations.

Get compliant — without disrupting your communication.

Whether you work in healthcare, government, or public services, NTA 7516 compliance is mandatory for protecting sensitive data via email. With SecuMailer, you get full compliance, ease of use, and no workflow disruption.

Ensure your email meets every compliance standard

Speak with our specialists and discover how SecuMailer keeps you fully aligned with NTA 7516 requirements.
Request a free compliance consultation