Health Data Hosting (HDS)

Dialog Insight is a certified Health Data Hosting (HDS) provider.

In accordance with the HDS certification framework, we publish below information relating to:

• the location of personal health data (PHD);
  • any transfers or remote access from countries outside the European Economic Area (EEA);
  • the potential risks of unauthorized access resulting from non-European legislation;
  • the safeguards implemented.

1. Location of health data

Personal health data hosted by Dialog Insight is stored exclusively within the European Economic Area (EEA).

Location of main infrastructure:

• Country: France
  • Cloud region: Île-de-France
  • Infrastructure type: HDS-certified physical and virtual infrastructure

No permanent storage of health data is carried out outside the EEA.

2. Remote access from a third country (outside the EEA)

When ad hoc technical access can be provided from a country outside the EEA (e.g., technical support in Canada), this access is:

• Strictly controlled;
  • Limited to authorized personnel;
  • Logged and tracked;
  • Performed only when necessary for maintenance or safety.

These access rights are based on:

• either an adequacy decision adopted by the European Commission;
  
  • or appropriate safeguards as defined in Article 46 of the GDPR (in particular, standard contractual clauses).

Additional technical measures are implemented to ensure a level of protection equivalent to that guaranteed within the European Union.

3. Possible subjection to non-European legislation

Some technical subcontractors involved in providing hosting services may be subject to non-EU legislation that could require access to data.

In this case:

• no data is permanently transferred outside the EEA;
  • the data is encrypted;
  • the encryption keys are managed within the EEA;
  • access is strictly controlled and logged;
  • any access request that does not comply with European Union law will be systematically challenged.

4. Mapping of the actors involved in the service

A detailed mapping of stakeholders and their associated guarantees is presented in this linked document. This is the reference version, maintained by Dialog Insight.

5. Commitment to transparency

Dialog Insight is committed to:

• keeping this page up to date;
  • informing its clients of any substantial changes affecting the location or conditions of access to health data;
  • providing any additional information required under the contract.

6. Contact

For any questions relating to data sovereignty or HDS certification: DPO@dialoginsight.com