{
  "generated_from": "https://saas-ranking.com/medical-practice/nextgen",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r6.60658",
  "snapshot_run": 6,
  "score_version": "v1",
  "vendor": {
    "name": "NextGen",
    "domain": "nextgen.com"
  },
  "category": {
    "slug": "medical-practice",
    "name": "Medical practice software"
  },
  "score": 30,
  "band": "E",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/data-processing-addendum",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/gdpr",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy/dpa",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.790Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/subprocessor-list",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.795Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.nextgen.com/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://nextgen.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust",
          "result": "found, but behind a sign-in"
        },
        {
          "url": "https://nextgen.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy-policy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.795Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.nextgen.com/",
          "result": "No answer within 10 seconds."
        },
        {
          "url": "https://nextgen.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.797Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/pricing",
          "result": "reached and rendered, no match"
        },
        {
          "url": "https://nextgen.com/pricing/",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://nextgen.com/plans",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/en/pricing",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://nextgen.com/pricing-plans",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.798Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.nextgen.com/trust",
      "addresses_checked": [
        {
          "url": "https://nextgen.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.798Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/legal/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/service-level-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/uptime",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/uptime-sla",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.800Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "found",
      "source_url": "https://nextgen.com/",
      "addresses_checked": [
        {
          "url": "http://nextgen.com/",
          "result": "redirects to https://nextgen.com/"
        },
        {
          "url": "https://nextgen.com/",
          "result": "HSTS max-age=31536000"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.800Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/",
          "result": "third-party requests before any interaction: ad.doubleclick.net, browser.sentry-cdn.com, cdn.cookielaw.org, cf-store.widencdn.net, debrtrki.usv.stape.io, fast.wistia.com, geolocation.onetrust.com, nextgen.widen.net, www.google.com, www.googletagmanager.com, www.gstatic.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.801Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/.well-known/security.txt",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.805Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://nextgen.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.805Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.nextgen.com/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://nextgen.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://nextgen.com/privacy-policy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T04:35:15.806Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "united-states",
      "subject": null,
      "quote": "rsonal data to us, you consent to the transfer of your data to, and processing of your data in, the United States. The Company Site and our products and services are currently hosted in the United Sta...",
      "source_url": "https://www.nextgen.com/privacy-policy",
      "measured_on": "2026-09-04T04:35:15.796Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "data-protection-officer",
      "subject": null,
      "quote": "Data Protection Officer",
      "source_url": "https://www.nextgen.com/privacy-policy",
      "measured_on": "2026-09-04T04:35:15.806Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "dedicated-address",
      "subject": null,
      "quote": "[address]@nextgen.com",
      "source_url": "https://www.nextgen.com/privacy-policy",
      "measured_on": "2026-09-04T04:35:15.806Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "cookielaw.org",
      "subject": null,
      "quote": "cdn.cookielaw.org",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "doubleclick.net",
      "subject": null,
      "quote": "ad.doubleclick.net",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "google.com",
      "subject": null,
      "quote": "www.google.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "gstatic.com",
      "subject": null,
      "quote": "www.gstatic.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "onetrust.com",
      "subject": null,
      "quote": "geolocation.onetrust.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "sentry-cdn.com",
      "subject": null,
      "quote": "browser.sentry-cdn.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "stape.io",
      "subject": null,
      "quote": "debrtrki.usv.stape.io",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "widen.net",
      "subject": null,
      "quote": "nextgen.widen.net",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "widencdn.net",
      "subject": null,
      "quote": "cf-store.widencdn.net",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "wistia.com",
      "subject": null,
      "quote": "fast.wistia.com",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.802Z"
    },
    {
      "key": "hsts_frist",
      "name": "HSTS max-age",
      "value": "31536000",
      "subject": null,
      "quote": "max-age=31536000",
      "source_url": "https://nextgen.com/",
      "measured_on": "2026-09-04T04:35:15.801Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "hipaa",
      "subject": "dienstleister",
      "quote": "ance Controls: AWS adheres to multiple security and compliance frameworks and standards , including HIPAA, HITRUST, SOC, ISO, PCI and DSS.",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "hitrust",
      "subject": "unklar",
      "quote": "ntrols: AWS adheres to multiple security and compliance frameworks and standards , including HIPAA, HITRUST, SOC, ISO, PCI and DSS.",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27001",
      "subject": "anbieter",
      "quote": "tandards, with our deployment, maintenance, and monitoring processes currently certified as meeting ISO 27001 standards, and additional controls satisfying ISO 27017 and ISO 27018.",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27017",
      "subject": "unklar",
      "quote": "ng processes currently certified as meeting ISO 27001 standards, and additional controls satisfying ISO 27017 and ISO 27018.",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27018",
      "subject": "erwaehnt",
      "quote": "urrently certified as meeting ISO 27001 standards, and additional controls satisfying ISO 27017 and ISO 27018.",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "soc-2-type-2",
      "subject": "unklar",
      "quote": "oducts and services, including: HITRUST Common Security Framework HITRUST Common Security Framework SOC 2 Type II and SOC 3 TX-RAMP Level 2 Certification Accredited HISP Under DirectTrust HITRUST Comm...",
      "source_url": "https://www.nextgen.com/trust",
      "measured_on": "2026-09-04T04:35:15.799Z"
    }
  ]
}