The company Ophos System, trading as elionis, holds a French Health Data Hosting (HDS) certification issued by an accredited certification body, in accordance with Articles L.1111-8 and R.1111-8-8 et seq. of the French Public Health Code (Code de la santé publique).
The HDS certification exclusively covers the services, activities, sites, infrastructure, and resources expressly included in the HDS certificate in force.
The scope of the certificate, its date of issue, its expiry or renewal date, and a copy of the certificate are available to the clients concerned.
This information is published in accordance with the transparency required by the HDS v2 framework and consistently with the General Terms of Membership (CGA) applicable to the services concerned.
Data location and sovereignty
For services falling within health data hosting, and where they involve the storage of personal health data, elionis carries out such storage exclusively within the European Economic Area (EEA).
As of the publication date of this page, the data concerned is stored in France on the following infrastructure:
- DC OPCORE – 29 rue Edith Cavell, 94400 Vitry-sur-Seine, France
- SSO (Ormesson server room) – elionis, 19 rue Maryse Bastié, 94490 Ormesson-sur-Marne, France
Unless otherwise expressly notified to the client for a specific service, no remote access to personal health data is carried out from a country outside the EEA.
As of the publication date of this page, elionis declares that it carries out no transfer of personal health data to a third country outside the EEA within the scope concerned.
HDS certificates
Standardized representation of safeguards
| Legal name of the entity | elionis | OPCORE Datacenter |
|---|---|---|
| Role in the hosting service (Host / Host’s subcontractor) | Host | Host’s subcontractor |
| HDS-certified (yes/no/exempt) | Yes | Yes |
| SecNumCloud 3.2 qualified | No | No |
| Hosting activities in which the entity is involved | Provision and operational maintenance of the infrastructure and services within the certified HDS scope; administration and operation of the information system; off-site backup depending on the subscribed services. | Provision and operational maintenance of the physical hosting site and the associated hardware infrastructure, according to the contractual scope concerned. |
| Access to personal health data from third countries outside the EEA, by the Host or one of its subcontractors (requirement no. 29 of the HDS framework) | No, no access to data from a third country outside the EEA | No, no access to data from a third country outside the EEA |
| Host or subcontractor exposed to a risk of access to personal health data from third countries outside the EEA, imposed by the legislation of a third country in violation of EU law (requirement no. 30 of the HDS framework) | No | No |
Subcontracting and relationship with the CGA
Where necessary for the performance of all or part of the services, elionis may use external technical service providers or sub-processors under the conditions set out in the CGA and the applicable regulations.
The information published on this page is intended to ensure HDS v2 transparency and to be read consistently with the contractual provisions applicable to the services subscribed to by the client.