OUR CERTIFICATIONS

Sensitive Data Hosting

With Mountain Men, benefit from high-level security for hosting your strategic data.

Whatever type of data you need to host, even when no specific standards are required by the applicable regulations, you can rest assured that Mountain Men’s entire infrastructure is designed to host your data securely.

Our commitment is backed by ISO 27001 certification, covering the full scope of our Cloud and telecom services. This ensures that your data is protected, including while in transit to our platforms.

Mountain Men offers hosting in data centers located within the European Union, as well as in Switzerland for organizations requiring a commitment to data residency.

Health Data Hosting

With Mountain Men, host and secure your data while staying compliant with applicable regulations.

Whether you are:

  • A healthcare facility
  • A medical practice
  • A medical imaging or radiology center
  • A group of laboratories
  • A prosthetics manufacturer
  • A medical software publisher
  • Or any other organization handling health data
Mountain Men is your ISO 27001- and HDS-certified partner providing a sovereign cloud hosted in 100% French data centers close to home.

View Our Certifications

Certificat ISO27001
Certificat HDS
Our HDS guarantees

Double perimeter of HDS certification

FAQs About Certifications and Their Benefits

ISO 27001 is an international standard for information security management. It provides a framework for establishing, implementing, and continually improving an Information Security Management System (ISMS).
It focuses on risk assessment, the implementation of security controls, and continuous improvement. The standard helps protect sensitive information, support regulatory compliance, and strengthen stakeholder trust.
Adopting ISO 27001 can also reduce the costs associated with security incidents and provide a competitive advantage.
HDS (Health Data Hosting) is a French certification framework designed to ensure the security, confidentiality, integrity, and availability of health data hosted by third-party providers.
It requires strict security measures, risk management practices, and regulatory compliance, including compliance with the GDPR.
HDS certification helps build trust among patients and healthcare professionals, supports compliance with legal requirements, and can provide a competitive advantage for certified providers.
Under the HDS framework, health data includes any information relating to the physical or mental health of an identifiable individual, including medical records, test results, diagnoses, treatments, and genetic data.

It may also include information about a person’s well-being and lifestyle

Protecting this data is essential because of its sensitive nature and its potential to reveal intimate personal information, making stringent security measures necessary.
The HDS framework primarily concerns organizations and service providers that host health data. The main categories include:
  • 1 – Companies Hosting Health Data: Businesses that provide services involving health data that must be stored. Examples include medical testing laboratories and prosthetics manufacturers.
  • 2 – Healthcare Facilities: Hospitals, clinics, and other healthcare providers that outsource the hosting of their health data.
  • 3 – IT Service Providers:IT companies offering hosting or health data management services to third parties.
  • 4 – HealthTech Startups and Companies: Businesses developing applications or services that use health data and require secure hosting.
  • 5 – Research Organizations: Medical research institutions and laboratories that use and store sensitive health data.
In summary, HDS certification requirements apply to service providers carrying out activities covered by the HDS framework. Depending on their role, organizations that host or otherwise process health data may need to ensure that their chosen providers meet the applicable security and compliance requirements.
The regulatory and legal framework governing HDS certification includes:
  • 1 – French Data Protection Act (Loi Informatique et Libertés, 1978, as amended in 2018): Protects personal data in France.
  • 2 – General Data Protection Regulation (GDPR): The European regulation governing the processing of personal data.
  • 3 – French Public Health Code (Code de la santé publique): Sets out the conditions for hosting health data, particularly under Articles L.1111-8 et seq.
  • 4 – Decree No. 2018-137 of February 26, 2018: Details the certification requirements for health data hosting providers.
  • 5 – Order of January 6, 2006: Established the former approval requirements for health data hosting providers.
Powered by  GDPR Cookie Compliance (opens in a new tab)
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.