Security, HDS hosting and GDPR
Data processed by Eva Medical AI is hosted on Google Cloud infrastructure located in France (Paris region), within a scope covered by the hosting provider's HDS certification. It is encrypted at rest and in transit, never used to train AI models, and the clinician controls its deletion.
Updated on 2026-10-05
What "HDS hosting" means
HDS (Hébergeur de Données de Santé) is the French certification granted to providers that host personal health data on behalf of third parties. Eva Medical AI does not claim to hold this certification itself: data is hosted and processed on infrastructure whose provider holds, for the relevant service and scope, an HDS certification. The official list of certified providers is published by the French Digital Health Agency (ANS).
Hosting and encryption
- Main infrastructure: Google Cloud Platform, Paris region (europe-west9), France.
- Compatible with deployments on Amazon Web Services and Microsoft Azure, in France or European Union regions, for organizations that require it.
- Data encrypted at rest and in transit.
- SaaS, on-premise or hybrid deployment depending on the organization's constraints.
Data usage and artificial intelligence
- Data is not used to train AI models.
- No patient-identifying data (name, identifier) must be sent to AI inference services.
- Inference services are used in regions and configurations covered by the hosting provider's HDS certification, depending on the provider and deployment.
- Documents and data remain accessible to the user, who can request deletion at any time.
Retention periods
| Data | Retention |
|---|---|
| Technical logs (errors, actions, login attempts, tokens) | 3 years, then automatic deletion |
| Account and practice data (patients, reports) | Until account deletion, then permanent deletion |
Subprocessors
| Subprocessor | Role | Location |
|---|---|---|
| Google Cloud Platform | Application hosting and storage (main deployment) | Paris, France |
| Amazon Web Services | Hosting and storage (alternative deployment) | France / European Union |
| Microsoft Azure | Hosting and storage (alternative deployment) | Paris, France |
| Stripe | Payments and subscriptions (billing data limited to what is strictly necessary) | United States |
| Google (Gemini API), AWS Bedrock, Azure (AI services), OpenAI | AI inference, without patient-identifying data | European Union / France depending on configuration (OpenAI: EU / United States) |
Your GDPR rights
The data controller is Eva Medical AI, 5 rue Ellenhard, 67000 Strasbourg, France. You have the rights of access, rectification, erasure, portability and objection. Send your request to support@evamedical.ai, or use "Download my data" in the account settings. We answer within one month.
Administrator access and access control
Role-based access control is in place: administration endpoints are protected by role authorization, and members of a practice cannot access another practice's data. A limited number of authorized administrators may intervene when a support or diagnostic operation requires it. Details of the measures in place and in progress are published in the security documentation.
Frequently asked questions
Is Eva Medical AI HDS-certified?
Eva Medical AI does not claim to hold the HDS certification itself. Data is hosted on Google Cloud infrastructure in France whose provider is HDS-certified for the relevant scope and services.
Where is the data stored?
On Google Cloud Platform, Paris region (europe-west9), France. Deployments on AWS or Azure in France or EU regions are possible for organizations.
Are my dictations used to train the AI?
No. Data is not used to train AI models.
How do I delete my data?
From the account settings or by e-mail to support@evamedical.ai. When the account is closed, account and practice data are permanently deleted.
Is the software GDPR-compliant?
Yes: identified data controller, listed subprocessors, defined retention periods, and rights of access, rectification, erasure, portability and objection exercisable via support@evamedical.ai.
Related pages
Try Eva Medical AI for free
One month free, no credit card. Dictate your first report in under two minutes.
www.evamedical.ai