Data privacy: our top priority
All services developed on our Padoa platform comply with French and European legislation, and have done so since day one.
Strict Compliance With Regulations
We strictly comply with the regulations in force on the protection of personal health data: the European General Data Protection Regulation (GDPR) and the French Data Protection Act (LIL) as well as the security criteria of the PGSSI-S (general security policy of the Ministry of Health).
We are committed to protecting your privacy from the moment we design our products
The protection of your data is our priority from the moment our platform is designed: we implement strict data access controls with continuous testing.
Access rights to our environments are strictly regulated. The design, sales, and marketing teams work exclusively in fictitious environments. Some of our employees, developers, and project managers may have access to individual health data to carry out their duties. This access is necessary to ensure the technical continuity and quality of our services. Access is granted on a named basis, assigned by client, and reviewed regularly. All employees are contractually bound by confidentiality. All their actions are tracked and auditable.
Our teams are trained in data security and regular reminders ensure that this topic remains at the heart of our concerns.
Each year, an external security audit in Padoa, and a penetration test, are implemented to verify the compliance of our practices.
