HDS compliance

AI-generated summary

Genesys Cloud's HDS certification validates its ability to protect French citizens' personal health data through independent third-party audit verification. The platform operates in a Shared Responsibility Model with AWS providing certified infrastructure while Genesys Cloud CX maintains certification for platform hosting, virtual infrastructure, and data operations. HDS-compliant deployments must utilize the EMEA Frankfurt region with Dublin backup. The platform maintains consistent functionality and interface across HDS and non-HDS organizations, including French language support. Third-party integrations and AppFoundry applications require separate compliance verification for handling protected health information. French customers receive standard terms in French plus a Health Data Hosting Schedule. Organizations must declare HDS compliance needs during the RFI stage and fulfill specific responsibilities, including providing breach notification contacts and signing compliance certificates. The platform ensures personal health data remains within the European Economic Area and maintains EU data protection compliance while operating as an HDS-certified processor without SecNumCloud 3.2 qualification.

Genesys is committed to respecting the security and privacy of your information and your customer’s information, including personal health data in the cloud. As part of this commitment, Genesys Cloud has undergone an independent third-party audit to achieve the Hébergeur de Données de Santé (HDS) certification. The HDS certificate validates that Genesys Cloud ensures data confidentiality, integrity, and availability to our customers and partners.

Note: For information about Genesys HDS International Data Transfers Declaration, see .

What is HDS?

The Hébergeur de Données de Santé (HDS) is a French Law that governs the health data of French citizens.

HDS certification aims to strengthen the protection of personal health data and to build an environment of trust around eHealth and patient monitoring.

It is based on benchmarks including compliance with ISO standards and allows certification to be issued by an accredited independent body to any structure or organization hosting health data.

Personal health data is sensitive data. Their access is regulated by law to protect the rights of individuals. The hosting of this data must therefore be carried out under security conditions adapted to their criticality. The regulations define the terms and conditions expected.

What is the scope of the HDS certification?

As per the Shared Responsibility Model, AWS, as our Physical Infrastructure Provider provides the certificate for the provision of physical hosting and physical infrastructure activities.

The compliance for activities 1 and 2 are inherited from AWS:

Provision and maintenance in operational condition of physical sites for hosting the hardware infrastructure of the information system used to process the health data
Provision and maintenance in operational condition of the hardware infrastructure of the information system used to process the health data

Genesys Cloud CX achieved HDS certification in the following areas:

Provision and maintenance in operational condition of the platform for hosting information system applications
Provision and maintenance in operational condition of the virtual infrastructure of the information system used to process the health data
Management and operation of the information system containing the health data
Backup of the health data

Is Genesys Cloud HDS-certified?

Genesys Cloud CX is HDS-certified through an independent audit which verified our administrative, physical, and technical controls.

What about AppFoundry applications, third-party integrations, and bring your own technology service providers?

Genesys Cloud cannot guarantee that third-party providers are HDS-certified. The HDS certificate does not extend beyond Genesys Cloud CX.

Generally, if you are using a third-party technology to communicate protected health information to or from Genesys Cloud, you must ensure that the third-party technology provider is HDS-certified.

Where does Genesys Cloud support HDS?

HDS customers must use the EMEA (Frankfurt) eu-central-1 region. The preferred backup location is EMEA (Dublin) eu-west-1 region. To meet your regulatory obligations for health data as well as Genesys’s share of responsibilities under HDS, select only one of the EEA regions listedfor hosting. Choosing any other non-EEA AWS Region may result in your data being stored against the applicable health data principles in France.

Is Amazon Web Services (AWS) HDS-certified?

Yes. AWS has achieved HDS certification. Details can be found on AWS Artifact.

What is different in Genesys Cloud with HDS compliance?

Genesys Cloud provides HDS-compliant organizations the same user interface and user experience as non-HDS compliant organizations. The standard French language option is available to HDS and non-HDS customers.

Notes:

Genesys Cloud provides the same high level of security to all organizations. HDS-compliant organizations and non-HDS compliant organizations are equally secure.
The standard terms & conditions are available in French for customers that require HDS compliance, with an added Health Data Hosting Schedule, which includes HDS requirements, such as the obligation for customers to provide contact details to Genesys for the person responsible for health data in their organization.

Inform Genesys at the earliest opportunity if HDS compliance is required, contact us. This is usually achieved as early as the RFI process.

Can I enable HDS compliance on an existing Genesys Cloud organization?

If you need to enable HDS compliance, contact us.

Do I have any responsibilities for using Genesys Cloud in a HDS-compliant manner?

Genesys Cloud customers:

Must inform Genesys that HDS compliance is required. This information is stored as part of the customer’s profile.
Must provide contact details for the person that Genesys must notify in the event of a health data breach and notify Genesys of any changes to the point of contact.
Must use the HDS contract, which is the standard Genesys Cloud Services terms and conditions, translated into French, with an added Health Data Hosting Schedule.
Must sign the certificate of compliance with the General Security Policy for Health Information Systems (PGSSI-S).

For more information, contact us.

Representation of guarantees

Business name of the actor	Role in the hosting service (host/processor of the host)	HDS certified	SecNumCloud 3.2 qualified	Hosting activities in which the player is involved	Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors (Requirement No. 29 of the HDS framework)	Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law (Requirement no 30 of the HDS framework)
Genesys	Processor	Yes	No	N/A	No, no access to data from a country outside the European Economic Area	No

[NEXT] Was this article helpful?

Get user feedback about articles.