Health Data Hosting (HDS)

Last updated: September 16, 2026

Dialog Insight is a certified Health Data Hosting (HDS) provider.

In accordance with the requirements applicable to health data hosting (HDS), Dialog Insight publishes the following information:

• the location of personal health data;
• any transfers or remote access from countries outside the European Economic Area (EEA);
• the potential risks of unauthorized access resulting from non-European legislation;
• the safeguards implemented.

1. Location of health data

Personal health data hosted by Dialog Insight is stored exclusively within the European Economic Area (EEA).

Location of main infrastructure:

• Country: France
• Cloud region: Île-de-France
• Infrastructure type: HDS-certified physical and virtual infrastructure

No permanent storage of health data is carried out outside the EEA.

2. Remote access from a third country (outside the EEA)

When ad hoc technical access can be provided from a country outside the EEA (e.g., technical support in Canada), this access is:

• Strictly controlled;
• Limited to authorized personnel;
• Logged and tracked;
• Performed only when necessary for the provision, operation, support, maintenance, or security of the services.

These access rights are based on:

• either an adequacy decision adopted by the European Commission;
• or appropriate safeguards as defined in Article 46 of the GDPR (in particular, standard contractual clauses).

In the absence of an applicable adequacy decision, appropriate safeguards and, where necessary, supplementary measures are implemented to ensure a level of protection that complies with applicable requirements.

3. Risks related to non-European legislation

Dialog Insight and certain subcontractors involved in the HDS service may be subject to the legislation of third countries which, in certain circumstances, may require access to data.

Dialog Insight assesses these risks and implements technical, organizational, and contractual measures to protect data and limit the risks of unauthorized access. The countries concerned, the identified regulations, and the applicable measures are presented in our risk map.

4. Mapping of Transfers and Access Outside the EEA

Dialog Insight publishes and maintains an up-to-date map showing the stakeholders involved in HDS delivery, as well as the transfers, remote access, and risks of unauthorized access associated with third countries.

View the Mapping of Transfers, Access Outside the EEA, and Risks of Unauthorized Access (French version)

5. Commitment to transparency

Dialog Insight is committed to:

• keeping this page up to date;
• informing its clients of any substantial changes affecting the location or conditions of access to health data;
• providing any additional information required under the contract.

6. Contact

For any questions relating to data sovereignty or HDS certification: DPO@dialoginsight.com