Votre question concerne quel type d'offre ?
Votre question concerne quel couloir Ségur ?
Votre question concerne quel dispositif Ségur ?
Votre question concerne quel produit ou service produit?
Votre question concerne quelle thématique ?
All the rules are set out in the HDS certification – Accreditation reference system and the COFRAC’s "Exigences spécifiques pour l’accréditation des organismes procédant à la certification de systèmes de management dans le domaine des technologies de l’information" (Specific requirements for structures that certify management systems in the information technology sector), available in our Documentation section.
To find out more about the list of certified and accredited bodies, click on the links below.
Cette réponse vous a-t-elle été utile ?
There are 6 types of activities that make you eligible as a health data host:
- providing and monitoring the operations of a physical site that hosts the material infrastructure of the IS used to treat health data;
- providing and maintaining the structural material used by the IS to host health data;
- providing and maintaining a platform that hosts the IS applications;
- providing and maintaining a digital structure for the IS which hosts health data;
- the administration and exploitation of the IS which contains the health data;
- health data backup services.
The full list of HDS-certified activities is available here:
Cette réponse vous a-t-elle été utile ?
Health CERT operates on weekdays between 9am and 6pm. Aside from these working hours, it is possible to contact the ANSSI to signal risks.
CERT Santé
+33 (0)9 72 43 91 25
Agence du Numérique en Santé
9 rue George Pitard, 75015 Paris
Cette réponse vous a-t-elle été utile ?
To register on the Convergence platform, you need to download the account request form to open an account as a company representative.
Before completing this form, please check that your company is not already represented by another person who is able to create an account for you to access the Platform. If you have any questions, please contact support at ans-support-convergence@esante.gouv.fr.
As soon as you receive the e-mail confirming the creation of your account, you will be able to initialize your password and access the Platform after accepting the General Terms of Use.
Cette réponse vous a-t-elle été utile ?
Yes. The ANS has a video platform with training material, including cybersecurity support. You will find information about cybersuveillance auditing, how to signal a security risk, how to increase your password security, and how to identity malicious email.
Cette réponse vous a-t-elle été utile ?
The evaluation is done in two phases. It is conducted by the certifying body, which must verify the compliance with the certification requirements set out in the HDS Certification document (available below).
The audit also verifies the specific requirements for health data hosting are being met.
Cette réponse vous a-t-elle été utile ?
Your application needs to be complete and signed, with all the following documents:
- the MDPH label rules, which describes the labelling process
- the convention regarding the use of the label, which defines the procedures that take place after the label is granted. For example: obligations tied to the label, audit visits, cases of modifying the label, etc.
- the annexes to the convention;
- the license of use for the labelled solution;
- the insurance security plan for the conformity checks relating to the MDPH label;
- if applicable, the decisions issued by partner organisations dealing with exchange fluxes (CNAF/SNGI, Imprimerie Nationale, etc.) to attest you are using the correct one.
The application must be sent in paper AND via electronic mail to:
Agence du Numérique en Santé
Labellisation logiciels Maisons Départementales des Personnes Handicapées
9 rue Georges Pitard 75015 Paris
labellisation.mdph@esante.gouv.fr
Cette réponse vous a-t-elle été utile ?
These documents are made available by the CNDA as a .zip file below.
Cette réponse vous a-t-elle été utile ?
Healthcare industrials and software publishers are encouraged to contact Health CERT if they discover a security incident or potential malware. CERT provides assistance and support to resolve such issues. CERT also assists you in your communications to health structures.
Cette réponse vous a-t-elle été utile ?
You may divide your service into as many products as you wish to register on the platform. The appropriate segmentation must correspond to your activity and the roadmaps/processes available on the platform.
It is important to include all the different versions associated with support or devices as different products, as they could impact the maturity level assessment of your solution.
In order to make the identification of products easier, each edition and version of the commercialised products needs to be registered. We suggest you use this format to name your product - (Name of the Product) (OS) (Device) - with the following terms:
- device can be named “Mobile” or “Website”
- OS can be named “iOS”, “Android”, “Windows”, “Linux” or any other operating system.
In addition, for registration into Mon Espace Santé (My Health Space): you must add as a product the solution that will be visible to the citizen/user in the service catalogue. The commercial name must be the same as the name visible by the citizen.
Cette réponse vous a-t-elle été utile ?
The application for the SI-MDPH label is open to any legal entity with a software solution aimed at the departmental disability centres (MDPHs). This includes the MDPHs themselves, which develop their own solutions in conjunction with the relevant Departmental Council.
The label application is a voluntary process: Anyone can be a candidate if they feel that their solution complies with the current requirements and the scope of the sector’s functional standards.
Cette réponse vous a-t-elle été utile ?
A base product (“Produit socle”) is a solution, a service, or device sold by an eHealth industrial, which is aimed at fulfilling the needs of a particular activity, practice or profession. It is not bound to the purchase of a previous product. It may be completed with Option Products (“Produit option”) to extend its functional coverage.
An option product (“Produit option”) is a solution, service, or device sold by an eHealth industrial to meet specific needs extending the functional perimeter of one or several base products (“produits socle”) to which it adds on. This means a base product must be purchased, prior to the use of an option product.
In the case of a base product being offered as an option to another product, we suggest you first declare the product as a “produit socle”. Then you will be able, from this entry, to duplicate and convert the product as a “produit option”.
Cette réponse vous a-t-elle été utile ?
The Convergence platform supports you in developing your business and defining your plan for compliance with regulations specific to the e-health sector.
To this end, the platform is organized around two tracks:
- digital health doctrine ;
- My health space.
Each of these paths is broken down into steps:
- doctrine is divided into 4 steps: Evaluation and projection socles , Teleconsultation, teleexpertise, telecare;
- My Health Space is divided into 2 steps: referencing without data exchange and referencing with data exchange.
The procedures include questionnaires which, once completed, will enable you to assess the maturity and/or compliance of your products with the digital health doctrine, or the assessments required for My Health Space registration.
Cette réponse vous a-t-elle été utile ?
The first step in completing the platform is to identify a manager who will oversee the completion operations. This person can then make an inventory of the products to be included in the scope of data entry, and list the resources to be mobilized: product managers, technical and functional experts, etc. Despite efforts to contextualize the questions, knowledge of healthcare IS interoperability, security and the ambitions of the doctrine of digital health is a prerequisite.
The questionnaires can then be read in groups. Based on the completion of an initial product, the reading of the questionnaires enables the identification of subjects that have been mastered, as well as those that require further investigation.
The pilot can then propose regular meetings with all product managers to monitor the progress of data entry, guarantee the consistency of responses and share expert feedback.
Cette réponse vous a-t-elle été utile ?
There are two main user profiles on the Convergence platform:
- Manager: this is either the Corporate Officer or a person authorized by the Corporate Officer; he/she is authorized to add new contributors, create products and grant rights to contributors from his/her company;
- Contributor: authorized to create accounts for other contributors, create products and complete questionnaires, within the limits of the rights assigned to him/her.
Contributors are given access rights to questionnaires for products already created within the platform, and to questionnaires relating to global strategy.
Contributors who do not have the right to validate questionnaires can only save drafts for questionnaires to which they have access.
Cette réponse vous a-t-elle été utile ?