Trust

Security, described as it really is

This page states what is in place and what is not yet. We distinguish what the platform does from what rests with the host and with your organisation, and we use a graded vocabulary: in place, aligned, to be contracted.

See the full product status

Security posture

Point by point, with the party responsible for each measure.

  • Access control

    Covered

    Application

    Rights verified server-side; each role is confined to its scope; cross-organisation access denials and attempts are logged.

  • Establishment separation

    Partial

    Application

    Each establishment has its own space. Some cases of read-by-identifier and direct access to uploaded files are being corrected (October 2026 review).

  • Encryption

    Partial

    Application + host

    Technical secrets encrypted (AES-256-GCM), passwords hashed (bcrypt), transport over TLS. Encryption of all health data at rest is still to be set up with the host.

  • Audit log

    Partial

    Application

    Sensitive actions are recorded. Logging of sign-ins and tamper-proofing through chaining are in progress.

  • Backups and reversibility

    Planned

    Operations

    A daily encrypted off-site backup and a restore test are being put in place. You recover your data in a usable format at the end of the contract.

  • Hosting in Tunisia

    Planned

    Host

    HygieSys can be hosted in Tunisia. Health-data hosting certification (HDS type) is not held; it is to be contracted.

  • Compliance with Law No. 2004-63

    Planned

    Organisation + publisher

    Processing health data in Tunisia requires a declaration to the INPDP. We assemble this file as part of a deployment; it is not compliance acquired by default.

Covered the platform implements the requirement.Partial part of the requirement is supported.Planned on the roadmap, not available yet.

We do not carry a certification badge we do not hold. Any certification cited is always attached to whoever holds it, together with its scope.

What depends on you, on us, on the host

The security of a deployment is shared. HygieSys provides access control, data separation, encryption of secrets and the audit log. The host provides data location, encryption at rest and any certification. Your organisation keeps control over accounts, roles and procedures.

We are preparing a security programme inspired by ISO 27001; no certification is held to date. An external penetration test and a restore test are planned before any sensitive deployment.

Frequently asked questions

Does our data leave Tunisia?

Hosting can be carried out in Tunisia. One exception: AI image analysis today uses an external provider by default; a local sovereign mode exists and can be enforced. We state this on the Product status page.

Do you hold HDS certification?

No. HDS is a French hosting certification. We do not display it, and we attach any certification to the body that holds it.

What do we recover at the end of the contract?

Your data, in a usable format. The reversibility procedure is part of our commitments.

A specific security requirement?

Tell us which one; we answer without overclaiming.

Contact us