HYPHAE
Book a demo
Security
Her health data, in safe hands.
Certified before it’s clinical. HYPHAE is built for the rules that govern health data in Europe, so your programme can trust it with the women it follows.
Certified & compliant
Built for the standards that govern health data and medical software in Europe.
HDS
Certified health data hosting
Health data is stored with a provider certified as a Hébergeur de Données de Santé, in the European Economic Area.
Certified host
GDPR
GDPR by design
Data minimisation, a clear legal basis for each use, a data processing agreement with every centre and a named data protection officer.
From day one
ISO 27001
Information security
Our security management follows ISO/IEC 27001 controls, with certification of HYPHAE itself on our roadmap.
Roadmap
CE · MDR
Medical device rules
Coordination features stay outside decision support. Any feature that would guide a clinical decision carries CE marking under the MDR first.
Before any clinical feature
Also designed for French health-data interoperability: Pro Santé Connect sign-in for professionals, INS patient identity and MSSanté secure messaging, at pilot sites.
Trusted data storage
Where her data lives, and what never happens to it.
Women at high risk are followed for decades. Their data has to be safe for just as long.
Hosted in Europe, on certified infrastructure
Health data stays in the European Economic Area, with an HDS-certified hosting provider and encrypted backups.
Never sold, never used to train AI
We do not sell health data or use it to train AI models. Any AI-drafted summary is checked by a clinician before she sees it.
Only what is needed
We collect what the pathway requires, and the woman chooses what she shares from her app with her care team.
Clinical-grade security
Security controls built for care teams.
The same rules apply whether HYPHAE runs standalone or connected to your hospital record.
Encryption everywhere
Data is encrypted in transit and at rest, with keys managed by our certified host.
Access by role
Each professional sees what their role needs, and nothing more. The woman controls what she shares.
A full audit trail
Every view, change and release of information is logged, with who did it and when.
Independent testing
Penetration tests and security reviews before every pilot and after every major release.
Full ownership and flexibility
Your protocols and your data stay yours.
Your centre owns its protocols, its records and its data. HYPHAE exchanges data in open standards such as FHIR, so nothing is locked in.
Professionals sign in with Pro Santé Connect or multi-factor authentication. If you stop using HYPHAE, your data is returned in a standard format and then deleted from our systems, as set out in your contract.
Your data. Your decisions.
You keep control of health data at all times.
Data retention
Retention periods follow your centre’s rules and French health-record law.
Data governance
A data processing agreement, a named DPO and a register of every processing activity.
Her consent
The woman decides what she shares from her app, and can change her mind.
Authentication
Pro Santé Connect for professionals, and secure sign-in for women and families.
Your protocol. Our coordination. Certified.
Questions on security
What IT and data protection teams ask us.
How is health data encrypted?
+
Where is the data hosted?
+
Does HYPHAE use patient data to train AI?
+
What happens to our data if we stop using HYPHAE?
+
Serious about her data?
Book a demo to see how HYPHAE protects it, or ask for our security pack.