See Galeon for real
Security and certifications
Your health data in the safest hands.
The Galeon EHR is hosted in France by an HDS-certified host, is ISO 27001 certified, LAP-certified by France’s National Authority for Health (HAS), and has withstood cyberattacks twice.
Our commitments
Five guarantees you can check.
HDS (health data hosting) certification is mandatory for anyone storing or processing health data in France. It is issued by an accredited body after an independent audit, under the French Digital Health Agency’s framework: for Galeon, AFNOR Certification.
HDS
Certified health data host, under the ANS framework: certificate no. 2023/107525.3, AFNOR Certification.
ISO 27001
The international standard for information security management, across Galeon’s whole information system.
CES ×3
Three-time CES Innovation Award winner in cybersecurity.
LAP-certified
Certified by France’s National Authority for Health (HAS): Galeon supports doctors at every prescription.
GDPR and sovereignty
No data transfer outside the European Economic Area; the data flow map is published and kept up to date.
Against cyberattacks
Hacker Defense Protection®, and the rest.
- DDoS protection
- WAF and application firewall
- Vulnerability scanning across the whole supply chain
- MDM and next-generation antivirus
- Two-factor authentication
Frequently asked questions
What we are asked about security.
What does ISO 27001 add on top of HDS certification?
HDS is a French sector-specific certification focused on health data hosting. ISO 27001 is the international information security management standard, it covers Galeon's entire information system beyond hosting alone: risk management, internal access controls, password policy, incident response, and disaster recovery planning.
Does Galeon's HAS LAP certification carry specific security obligations?
Yes. The LAP certification (Prescription Decision Support Software) is issued by France's National Health Authority (HAS). It imposes specific functional and security requirements on the prescription module: prescription traceability, drug interaction alerts verified against official clinical references, regular updates to clinical databases. It complements HDS and ISO 27001: care safety comes on top of data security.
Where exactly is Galeon patient data physically hosted?
Data is distributed across 6 HDS-certified sites, all in France: Annecy (Galeon HQ), Alençon (AZNetwork), Nozay (AZNetwork PAR01 and PAR03), Marcoussis (AZNetwork PAR02) and La Ciotat (ITinSell). Zero data transfers outside the European Economic Area are performed for certified Galeon services.
The guide
Patient record security, in one guide.
Security does not come at the expense of interoperability: Galeon integrates with your existing systems without compromising data protection.
Is your EHR up to standard on security?
Our guide to patient record security: cyberattacks, data leaks, GDPR compliance. Free, no commitment, as a PDF.
Let’s talk about the security of your data.
2 sales reps available from tomorrowYour IT, your interfaces, your timeline. Pick a slot: Valérie or Yohan will call you back.
- HDS certified
- ISO 27001
- GDPR compliant
- LAP certified (HAS)