All the rules are set out in the HDS certification – Accreditation reference system and the COFRAC’s "Exigences spécifiques pour l’accréditation des organismes procédant à la certification de systèmes de management dans le domaine des technologies de l’information" (Specific requirements for structures that certify management systems in the information technology sector), available in our Documentation section.

To find out more about the list of certified and accredited bodies, click on the links below.

There are 6 types of activities that make you eligible as a health data host:

1. providing and monitoring the operations of a physical site that hosts the material infrastructure of the IS used to treat health data;
2. providing and maintaining the structural material used by the IS to host health data;
3. providing and maintaining a platform that hosts the IS applications;
4. providing and maintaining a digital structure for the IS which hosts health data;
5. the administration and exploitation of the IS which contains the health data;
6. health data backup services.

The full list of HDS-certified activities is available here: 

There are two search options in the Health Pro Directory:

• A keyword search (Who ? What ? Where ?) that allows you to find professionals in matching establishments;
• A detailed search (Profession, specialisation, skills, ID, place of practice) to target health professionals or health structures.

The RPPS has restricted access content. You need to log in to the Health Pro Directory to access these data. The use of a CPS card as means of authentication is required:

• if you carry a Director of Establishement (CDE) card or a liberal CPS card, you may automatically access the information whose access is granted to you;
• in other cases, accessing the directory with a CPx-type card may need a prior enrolment process with the ANS. You will need to fill a RPPS access request form.

You need a card reader in order to authentify yourself with a CPx-type card.

For further information, read our pages to the CPS and e-CPS.

The evaluation is done in two phases. It is conducted by the certifying body, which must verify the compliance with the certification requirements set out in the HDS Certification document (available below).

The audit also verifies the specific requirements for health data hosting are being met. 

Your application needs to be complete and signed, with all the following documents:

• the MDPH label rules, which describes the labelling process  
• the convention regarding the use of the label, which defines the procedures that take place after the label is granted. For example: obligations tied to the label, audit visits, cases of modifying the label, etc. 
• the annexes to the convention; 
• the license of use for the labelled solution; 
• the insurance security plan for the conformity checks relating to the MDPH label; 
• if applicable, the decisions issued by partner organisations dealing with exchange fluxes (CNAF/SNGI, Imprimerie Nationale, etc.) to attest you are using the correct one. 

The application must be sent in paper AND via electronic mail to: 

Agence du Numérique en Santé 
Labellisation logiciels Maisons Départementales des Personnes Handicapées 
9 rue Georges Pitard 75015 Paris 

labellisation.mdph@esante.gouv.fr 

These documents are made available by the CNDA as a .zip file below.

It is compulsory to have an individual CPx-type card to log in to the INSi teleservice. Three types of cards are supported: CPS, CPE, CPF. 

CPx cards issued before December 2020 have a contactless chip that prevents from overwriting its code.

The new CPS R3V3 cards that are now in circulation have a Mifare Desfire chip. These cards can stock crypto-secret keys that work with the Mifare Desfire protocol.

All the information about this feature is available in the Manual to deploy contactless CPx cards (available to download below). One must be cautious about the data inserted in the chip’s writing code.

We strongly advise against using this section of the chip to stock access rights. The ANS recommends you to use the ANSSI guidelines on using a "transparent" reader in connected mode. This does not involve a cryptographic protocol during a badge authentication – only the UTL (logic treatment unit) takes part in the cryptographic protocol.

ANSSI advises against setting up a “smart” badge allowing a double authentication breaking from the UTL.

All the recommendations on securing systems for physical access and video projection are available in the document below, "Recommendations on securing systems for physical and video projection access".

The application for the SI-MDPH label is open to any legal entity with a software solution aimed at the departmental disability centres (MDPHs). This includes the MDPHs themselves, which develop their own solutions in conjunction with the relevant Departmental Council.  

The label application is a voluntary process: Anyone can be a candidate if they feel that their solution complies with the current requirements and the scope of the sector’s functional standards.

This midware allows the interfacing between computer applications, such as the Vivoptim doctors portal and the CPS card.

The national ID is on the first line of your CPS card:

• Add a “8” before your RPPS ID, for example: 81234567890 ;
• Add a “0” before your ADELI ID, for example: 01234567890.