Compliance
GDPR: what Fransys gives you and what remains your responsibility. HDS and SecNumCloud: where Fransys stands.
GDPR: what Fransys gives you
Section titled “GDPR: what Fransys gives you”- Location: you choose the country of each cluster; nothing is replicated to a region you didn’t choose.
- European hosting providers, subject to the GDPR, with their own certifications.
- Encrypted traffic: HTTPS on every public address.
- Protected secrets: encrypted variables, keys never shown again.
GDPR: what remains your responsibility
Section titled “GDPR: what remains your responsibility”Infrastructure isn’t enough: your application’s compliance depends on what it does with the data.
- collecting data and getting your users’ consent;
- the processing your application carries out;
- deleting data on request, including in your backups, which expire according to their retention.
Health data (HDS)
Section titled “Health data (HDS)”Fransys is not a certified health data host (HDS). Don’t host health data subject to HDS certification on it.
SecNumCloud
Section titled “SecNumCloud”SecNumCloud is a qualification issued by ANSSI, the French national cybersecurity agency. It’s the hosting provider Outscale that is qualified, not Fransys: choosing Outscale doesn’t make your service SecNumCloud qualified.
A specific question
Section titled “A specific question”For a security questionnaire or a regulatory requirement, write to the team from the help button.