# Compliance

> GDPR: what Fransys gives you and what remains your responsibility. HDS and SecNumCloud: where Fransys stands.

Source: https://docs.fransys.cloud/en/securite/conformite/ Checked against the console on 2026-10-23.

## GDPR: what Fransys gives you

- **Location**: you choose the country of each cluster; nothing is replicated to a region you didn't choose.
- **European hosting providers**, subject to the GDPR, with their own certifications.
- **Encrypted traffic**: HTTPS on every public address.
- **Protected secrets**: encrypted variables, keys never shown again.

## GDPR: what remains your responsibility

Infrastructure isn't enough: your application's compliance depends on what it does with the data.
- collecting data and getting your users' consent;
- the processing your application carries out;
- deleting data on request, including in your backups, which expire according to their retention.

## Health data (HDS)

**Fransys is not a certified health data host (HDS).** Don't host health data subject to HDS certification on it.

## SecNumCloud

SecNumCloud is a qualification issued by ANSSI, the French national cybersecurity agency. It's the hosting provider **Outscale** that is qualified, not Fransys: choosing Outscale doesn't make your service SecNumCloud qualified.

## A specific question

For a security questionnaire or a regulatory requirement, write to the team from the help button.