Security and compliance
Health data calls for the highest level of protection. Here is how Spark delivers it.
Hosting
All data is hosted in France by OVHcloud, on infrastructure certified as a Health Data Host (HDS). Replication, backups and multi-zone redundancy ensure service continuity.
Personal data
Doctreen processes data in compliance with the GDPR. Processing is documented and monitored with our DPO, who can be reached at dpo@doctreen.com.
Access and deployment
- Secure, SSO-compatible authentication.
- Centralised deployment via GPO or the Chrome Business admin console.
- Limited, documented network flows, over HTTPS only.
- Separate development and production environments, with governed access.
Operations
- Continuous platform monitoring (logs, metrics, alerts).
- Regular updates, tested before going into production.
- Planned maintenance announced at least 5 days in advance, outside working hours (10 pm – 6 am, French time).
- Security incident response plan and GDPR breach notification procedures.
Service commitments
On the Enterprise offer: guaranteed availability of 99.5% per month, and contractual response times based on incident severity.
For your IT department
The requirements sheet lists compatible browsers, the network flows to open and the deployment steps.
