Retrievant's Paris region has been certified as an Hébergeur de Données de Santé (HDS), the French standard for hosting personal health data. The certification was issued following an independent audit covering infrastructure, access control, incident management and the operational procedures around our retrieval specialists.
HDS matters because French hospitals, clinics and health-tech companies are legally required to host patient data with a certified provider. Until today, French organisations could use Retrievant only through an HDS-certified intermediary. They can now integrate directly.
The certification sits alongside SOC 2 Type II, HIPAA and GDPR compliance. All four are maintained as separate programmes with separate audits; we publish the current status of each on the security page and make reports available to customers under NDA.
The audit also covered something most hosting certifications do not: what happens when a human takes over from an agent. Our specialists work in a monitored environment with no export capability, and every action they take is logged in the same audit trail as the agent's. The auditors reviewed those controls specifically and we are glad to have them validated.
About Retrievant
Retrievant is an AI retrieval company headquartered in Paris. Its agents retrieve a patient's complete medical history on the patient's authorisation and deliver one verified, source-linked record to legal, insurance, research, provider and digital-health organisations. Retrievant is SOC 2 Type II, HIPAA, GDPR and HDS certified.