Security & Compliance

Your patients' data deserves the highest protection

Delta is designed from the ground up with health data security at its core. HDS-certified hosting, end-to-end encryption, and full GDPR compliance.

HDS Certified

GDPR Compliant

AES-256 Encryption

Hosting

Health data hosting in France

Your data is hosted exclusively in France, on infrastructure certified for health data hosting (HDS).

HDS Certification

Our hosting provider holds the Health Data Hosting (HDS) certification, mandatory in France for storing personal health data.

ISO 27001 certified infrastructure
Annual third-party security audits
24/7 monitoring and incident response

Data Sovereignty

Your data never leaves France. No transfer to third-party countries, no exposure to foreign legislations.

Data centers located in France
No data transfer outside the EU
Subject to French and European law only

Encryption

Your data, encrypted at every step

From your browser to our servers and at rest in our databases, your data is always encrypted with industry-leading standards.

In Transit

All communications are encrypted with TLS 1.3. Your data is protected during every transfer between your device and our servers.

At Rest

All stored data is encrypted with AES-256, the same standard used by banks and government agencies worldwide.

Key Management

Encryption keys are managed securely with automatic rotation. Access is strictly limited and audited.

GDPR

Full GDPR compliance

We respect every right granted by the General Data Protection Regulation. Your patients' rights are our priority.

Right of Access

Export all your data at any time in a standard format. Full transparency on what we store.

Right to Rectification

Modify or correct your personal data at any time directly from your account settings.

Right to Erasure

Request complete deletion of your account and all associated data. We permanently erase everything.

Right to Portability

Download all your data in a structured, machine-readable format to transfer to another service.

Data Minimization

We only collect data that is strictly necessary for the service to function. Nothing more.

Data Protection Officer

A dedicated DPO oversees our compliance. Contact them directly for any question regarding your data.

FAQ

Frequently asked questions

All your data is hosted exclusively in France, on HDS-certified infrastructure. No data is transferred outside of France or the European Union. Our servers are located in secure data centers that comply with the strictest health data standards.

Absolutely not. Your patients' data is never used to train, fine-tune, or improve any AI model. Your data is yours alone. We use AI only in real time to assist you during your sessions, and the data is processed without being retained for training purposes.

When you delete your account, all your data is permanently and irreversibly erased within 30 days. This includes session notes, transcripts, patient records, and any personal information. No backup copy is retained.

You can reach our Data Protection Officer at any time by emailing securite@delta.fr. We commit to responding to every request within 72 hours. You can also exercise your rights (access, rectification, erasure) through this same address.

A question about security?

Our team is available to answer all your questions about data protection and compliance.

Contact our security team

securite@delta.fr