From the moment the first patient walks in, a clinic depends on a chain of systems: confirming cover with ZZZS, pulling up the chart in the practice management software, issuing an e-recept, sending an e-napotnica to a consultant, checking earlier findings through eZdravje. One frozen program or a card reader that will not read, and the queue at reception grows by the minute. Apply supports private surgeries, concession-holding GPs, dentists, physiotherapists and psychotherapists, always from a distance. Health information is handled the way GDPR and ZVOP-2 demand: as special category data that deserves much tighter safeguards than a mailing list.
Five topics weigh heavily in nearly every surgery. Some keep consultations on schedule; others make sure you can respond calmly when a patient requests access to their file or the regulator writes in.
Charts might live on a compact server tucked behind the front desk or in a hosted platform run by the software house. Either way, Apply takes charge of the operating system, the database engine, patching and health checks. Ahead of each version upgrade we ready the PCs; once it is installed we verify that the ZZZS link, e-recept, e-napotnica, printers and readers still cooperate. Clinical configuration inside the application remains the vendor's domain.
A generic login named after the front desk gives way to individual accounts, role-based rights, auto-locking screens, full-disk encryption on laptops and an audit trail. If a patient wants to know who viewed their notes, the trail answers, not anyone's recollection. When a locum finishes or a nurse moves on, their access ends on their last day.
Multiple snapshots across the working day, an off-site copy that ransomware has no path to, and recoveries rehearsed at intervals. Bulky imaging such as dental panoramics or ultrasound clips is handled under a separate plan. Healthcare records carry lengthy legal retention periods; confirm which apply to your practice with a lawyer or your professional chamber, and leave the storage mechanics to us.
Lab findings do not belong in an unprotected email, and certainly not in a staff member's private Viber chat. An encrypted route or a patient portal is the proper channel. The online appointment form asks for the minimum, the text-message reminder service is covered by a signed processor agreement, and you know in which country each provider keeps its data.
Front-desk and treatment-room PCs, printers, smart card readers and a patient Wi-Fi isolated entirely from clinical systems. Updates and breakdowns are dealt with over remote access. Diagnostic equipment, whether X-ray units, intraoral scanners or cardiographs, continues to be serviced by its maker or an approved engineer.
Anything able to stop consultations comes first. Then the paperwork you will reach for when a patient invokes their rights or a supervisory body asks for information.
Where do charts and scanned consent forms sit, who opens them, and what leaves the building for laboratories, consultants or hospitals?
Assessing threats to health data, checking agreements with the software house, the hosting firm and the appointment platform, and bringing the record of processing up to date. The wording of patient notices comes from your lawyer; placing them correctly is our part.
Named accounts, two-step login, encryption, verified backups and a cellular fallback line, rolled out at times you choose so the diary is never disrupted.
A service desk on weekdays from 9:00 to 17:00, a daily glance at backup status and periodic access reviews, say when a nurse starts parental leave or a new GP arrives for the summer.
Imagine a three-dentist practice in Maribor. The front desk shares one login, and its password is taped to the screen bezel. Our inventory uncovers more: a former assistant who left months ago still has a remote control app on her home PC that reaches the patient list. Nobody meant harm, but if data leaked, the practice could not say who had seen what. Individual logins, removal of unmanaged remote tools and an audit trail are a few hours' work, and they end that uncertainty.
Treatment codes, private fee schedules, letter templates and ZZZS claims settings belong to the software house. Our territory is the layer beneath and around it: hosting, database, backup, network, accounts and protection. For issues that straddle the line, we contact the vendor's support desk directly, so you are never stuck passing messages back and forth.
This is ultimately a legal judgement. Because health data is special category information, the tougher GDPR and ZVOP-2 rules apply, and medical legislation adds its own. You decide together with your lawyer. Apply lays out the alternatives, reviews the provider's terms and the location of its EU data centres, plans the migration and documents the decision for your data protection file.
Unprotected email and messaging from private phones take the data out of your control: a typo sends it to a stranger, a phone gets lost, a departing employee takes the thread with them. Much is already visible to patients in eZdravje. For everything else we provide encrypted mail or a download link locked with a password. The choice of channel and how patients are told about it is yours to settle with your lawyer.
A fault in the operator's network is beyond anyone in the surgery, so a written contingency routine is essential: how to register patients while systems are down and how to catch up afterwards. Problems with your own line, on the other hand, can be made very short. We configure a router with a 4G or 5G fallback; you obtain the SIM card from your operator, the switch-over happens automatically and the front desk often carries on unaware.
No. Upkeep and calibration of imaging units, scanners, cardiographs or ultrasound remain with the manufacturer or its approved engineer. We take care of the network and the PC each device is plugged into: its own network segment, only essential traffic allowed, and no remote access left open for outsiders. An ageing PC that cannot be upgraded therefore never becomes a gateway into every other system.
No; visits are not part of how Apply works. Minor hands-on jobs, like moving a cable to a different socket or swapping a router, are done by a member of your staff with our engineer talking them through it on video, or by a local technician you already know. At a physiotherapy practice with two treatment rooms, changing a network switch this way fits into a lunch break.
How many doctors and therapists practise with you, which clinical software do you run and where are patient charts held at the moment? Expect our first proposal within one working day.
Enquiry received
An engineer will write back no later than the following working day. Faults that leave your staff unable to work are always looked at first.
No town by that name here. Check the letters, or settle for the nearest larger place. Our engineers work only over the internet, so Kočevje and Koper get precisely the same treatment.
