HDSv2 Certification
Raise the security standards for your health data
The healthcare sector handles highly sensitive data. Mandated by the French Digital Health Agency (ANS), the HDSv2 certification imposes a strict framework on hosting providers and digital service providers. More than just a legal requirement, it is an opportunity to guarantee patient protection, ensure the resilience of your systems against cyberthreats, and demonstrate the robustness of your infrastructure.
Transition
A Regulatory Transition to Anticipate
Scheduled to be completed in 2027, the migration to this new framework will permanently replace the previous version. To ensure a smooth transition without disrupting your business, our Cybeval experts will guide you step by step toward robust and sustainable compliance.
Requirements
Stricter safety requirements
The HDSv2 certification is structured around six categories of requirements: security policy, physical and logical security of data centers, crisis management, business continuity, and managed services. At Cybeval, we help you effectively organize each component to precisely meet the authorities’ requirements.
Prerequisites
The Prerequisites for ISO 27001
HDSv2 now requires compliance with ISO/IEC 27001 as a mandatory prerequisite prior to the final audit. Thanks to their in-depth knowledge of these standards, our Cybeval auditors skillfully integrate the two standards to build a unified and effective security management system.
Certification
A permit issued for 3 years
Issued by a COFRAC-accredited OEC, the HDSv2 is valid for three years and requires an annual surveillance audit. With Cybeval’s expertise and customized support, you can secure your certification, reassure your clients, and thereby strengthen your status as a trusted third party in the healthcare sector.
