{"id":76524,"date":"2025-11-18T16:37:20","date_gmt":"2025-11-18T15:37:20","guid":{"rendered":"https:\/\/jotelulu.com\/?page_id=76524"},"modified":"2025-11-18T16:39:11","modified_gmt":"2025-11-18T15:39:11","slug":"hds-addendum","status":"publish","type":"page","link":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/","title":{"rendered":"HDS Addendum"},"content":{"rendered":"

Version November 2025<\/em><\/p>\n

Specific conditions applicable to the \u201chosting of healthdata\u201d<\/strong> (only applicable to French clients in the healthcare sector)<\/p>\n

Definitions<\/p>\n

Capitalized terms shall have the meanings set forth below and, in the absence thereof, the meanings set forth elsewhere in the Contract.<\/p>\n

ANS : Agence du Num\u00e9rique en Sant\u00e9.<\/p>\n

Health data: Personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.<\/p>\n

HDS certificate: Certificate of compliance with the Health Data Host (HDS) certification framework \u2013 Requirements \u2013 v2.0\u201d drawn up by the ANS and published on May 16, 2024 or with the previous version of the said certification framework (V1.1 final \u2013 Mai 2018).<\/p>\n

\u00ab Politique g\u00e9n\u00e9rale de s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information de sant\u00e9 \u00bb ou \u00ab PGSSI-S \u00bb : Body of documents including guidelines and guides drawn up by the ANS in application of article 1470-5 of the French Public Health Code, aimed at guaranteeing the security and confidentiality of personal health data.<\/p>\n

\u201cHealth Data Hosting Service\u201d or \u2018HDS Services\u2019: JOTELULU Services that may be used by the Client to host health data.<\/p>\n

Purpose<\/strong><\/p>\n

These specific conditions describe the specific conditions applicable to the Services provided by JOTELULU when these Services are used by the Client to host Health Data.<\/p>\n

These specific conditions are an integral part of the Contract in force between JOTELULU and the Client, and supplement the other documents that are part of the said Contract, and that remain fully applicable to the HDS Services. However, in the event of any conflict, the present conditions shall prevail.<\/p>\n

Services eligible for hosting health data
\nOnly the following Services provided by JOTELULU are eligible for Health Data Hosting (the \u201cHDS Services\u201d):<\/p>\n

Servers<\/strong><\/p>\n

Object Storage
\nCloud Storage (Files and Object)
\nRemote Desktop.
\nThe Client shall not use any other Service offered by JOTELULU to host healthcare data.<\/p>\n

HDS Certification<\/strong><\/p>\n

3.1 JOTELULU HDS Certificates<\/p>\n

In accordance with Articles L1111-8 of the French Public Health Code, JOTELULU holds, for all the HDS Services subject of these Specific conditions, a Certificate of Compliance with the \u201cHealth Data Hosting (HDS) Certification Framework \u2013 Requirements \u2013 V2.0 \u00bb drawn up by the ANS and published on May 16, 2024.<\/p>\n

This HDS Certificate was issued on 12th February 2025 by a certification body accredited in accordance with the accreditation guidelines drawn up by the ANS, and must be renewed by 11th February 2028.<\/p>\n

The above-mentioned HDS Certificate covers the following scope:<\/p>\n

(a) For all HDS Services hosted in France and Spain, the following activities referred to in article R1111-9 of the French Public Health Code:<\/p>\n

The provision and maintenance in operational condition of physical sites for hosting the hardware infrastructure of the information system used to process the health data;
\nThe provision and maintenance in operational condition of the hardware infrastructure of the information system used to process the health data;
\nThe provision and maintenance in operational condition of the virtual infrastructure of the information system used to process the health data;
\nThe provision and maintenance in operational condition of the platform for hosting information system applications.
\n(b) Only for the HDS Services Server, Remote Desktop and Cloud Storage, the following activity covered by the same article of the French Public Health Code:<\/p>\n

Backing up health data.
\n3.2 Housing HDS Certificate<\/p>\n

As part of the provision of the Services, JOTELULU has recourse to a third-party service provider in charge of the provision and maintenance in operational condition of the physical sites in which JOTELULU\u2019s HDS Services are hosted (the \u201cHousing Provider\u201d).<\/p>\n

The Housing Provider holds an HDS certificate of compliance with the \u201cHealth Data Hosting (HDS) Certification Framework \u2018Requirements and Controls\u2019 (Version 1.1 final \u2013 May 2018) drawn up by the ANS.<\/p>\n

The scope of this HDS Certificate covers housing services provided in France only, and consists of the following activities referred to in article R1111-9 of the French Public Health Code:<\/p>\n

The provision and maintenance in operational condition of physical sites for hosting the hardware infrastructure of the information system used to process the health data.<\/p>\n

This HDS Certificate was issued on June 22, 2023 by a certification body accredited in accordance with the accreditation guidelines drawn up by the ANS, and must be renewed by June 23, 2026. In addition, before May 16, 2026, the Housing Provider is required to carry out a transition audit to verify that the requirements of the new version of the \u201cHealth Data Hosting (HDS) Certification Framework \u2018Requirements\u2019 (Version 2.0)\u201d published on May 16, 2024, have been successfully implemented.<\/p>\n

3.3 Activities out of the HDS certification scope<\/p>\n

The following activities, referred to in article R1111-9 of the French Public Health Code, are not part of the HDS Services, and are therefore excluded from the scope of JOTELULU\u2019s HDS certification:<\/p>\n

The management and operation of the information system containing the health data.<\/p>\n

3.4 Availability of HDS certificates<\/p>\n

The above-mentioned HDS certificates are made available to the Client via his management interface.<\/p>\n

3.5 Certification loss<\/p>\n

JOTELULU undertakes to inform the Client as soon as possible if:<\/p>\n

(a) The HDS certificates of JOTELULU and the Housing Provider are not renewed by the above-mentioned deadlines, and\/or<\/p>\n

(b) the Housing Provider\u2019s transitioning audit to the new version of the \u201cHealth Data Hosting (HDS) Certification Framework \u2018Requirements\u2019 (V2.0)\u201d published on May 16, 2024, has not been successfully completed by May 16, 2026.<\/p>\n

If JOTELULU fails to remedy to such a certification loss within 60 days of the aforementioned deadlines, the Client may be entitled to terminate its HDS services.<\/p>\n

HDS Services execution<\/strong><\/p>\n

Hosting location
\nThe HDS services hosting location is communicated to the Client in the Portal and on the JOTELULU\u2019s website.<\/p>\n

Where the Client has a choice between several hosting locations, it selects the hosting location(s) of its choice at the time of initial configuration of the Service concerned.<\/p>\n

4.2 Service Level Objectives<\/p>\n

As part of the HDS Services, JOTELULU undertakes to comply with the Service level objectives defined in the section \u201cService Level Agreement\u201d of the General Terms of Service, in particular:<\/p>\n

The Service \u201cmonthly uptime percentage\u201d objective.<\/p>\n

If the said service levels objectives are not met, the Client shall benefit from financial credits in the conditions provided into the aforesaid \u201cService Level Agreement\u201d section.<\/p>\n

4.3 Capacity planning<\/p>\n

JOTELULU ensures through monitoring and periodic reviews that the capacity and sizing of the infrastructures used to provide the HDS services are adapted to the Service Level Agreement.<\/p>\n

However, with regard to resources shared by several clients, JOTELULU makes best effort to meet its clients\u2019 capacity needs, but cannot guarantee any volume of available resources.<\/p>\n

In order to ensure the continuity of its activities, and in particular the availability of the information system used to process health data, the Client shall anticipate its needs and liaise with JOTELULU Client support to confirm the availability of enough resources, in particular in case of significative increase of capacity requirements.<\/p>\n

4.4 Health data processing<\/p>\n

JOTELULU undertakes to process the health data hosted by the Client as part of the HDS Services only for the purposes of performing said Services, in accordance with the Data Processing Agreement and the Client\u2019s documented instructions as set out in the Contract.<\/p>\n

In this context, the Health data processing that JOTELULU may carry out as part of the HDS Services is limited to storage, compute and, in the event of termination of the Services, erasure and\/or destruction. The processing operations specific to each HDS Service are detailed in the relevant applicable Specific terms and conditions of Service.<\/p>\n

Subject to the provisions of article 4.7 below, JOTELULU is not authorized to access the health data covered by these Specific conditions.<\/p>\n

4.5 Security and continuity of the HDS Services<\/p>\n

In order to secure and ensure the continuity of the HDS Services, notably in case of failure of its part, JOTELULU has put in place, and undertakes to maintain for the entire duration of the HDS Services, appropriate technical and organizational measures. These measures are set out in the \u201cData Processing Agreement\u201d and the \u201cSecurity of JOTELULU Services\u201d schedule.<\/p>\n

The document \u201cSecurity of JOTELULU Services\u201d and the applicable Specific terms and conditions of service specify the division of roles and responsibilities between the Client and JOTELULU with regard to the security and continuity of Services.<\/p>\n

JOTELULU notifies the Client of any breach of health data in accordance with the conditions set out in the section \u201cPersonal data breach\u201d of the \u201cData Processing Agreement\u201d.<\/p>\n

4.6 Data subject requests<\/p>\n

The Service Provider provides the procedures and means set out in the \u201cData Processing Agreement\u201d enabling the Client to respond, in accordance with Chapter 3 of the RGPD and Articles L1110-4 and L1111-7 of the French Public Health Code, to requests to exercise the rights of data subjects defined by Articles 15 to 22 of the GDPR. The effectiveness of these means and procedures is periodically audited.<\/p>\n

4.7 Authority requests<\/p>\n

In the event of requests from authorities, in particular judicial or administrative authorities, to access or receive communication of the health data covered by these Specific conditions, JOTELULU undertakes to implement the procedure set out in the article \u201cManagement of third parties requests\u201d of the \u201cData Processing Agreement\u201d.<\/p>\n

4.8 Sub-processing<\/p>\n

The list of JOTELULU sub-processors is attached to the \u201cData Processing Agreement\u201d.<\/p>\n

When JOTELULU uses sub-processors to perform the HDS Services, it undertakes to comply with the conditions set out in the article \u201cSub-processing\u201d of the said \u201cData Processing Agreement\u201d.<\/p>\n

The Housing Providers, which are respectively incorporated under the laws of France and Spain and therefore primarily subject to French and Spanish jurisdiction, are owned by a U.S.-based company that may be subject to certain non-European regulations, including the U.S. Cloud Act and the Foreign Intelligence Surveillance Act (FISA). However, to the extent the Housing Providers are not technically able to access the Health data especially since (i) they have no logical access to the information system and (ii) JOTELULU applies full-controlled encryption on every disks used as part of the HDS Services, no risk of unauthorised access to Health data induced by US regulations exists.<\/p>\n

4.9 Changes to the conditions of Service<\/p>\n

JOTELULU undertakes to inform the Client of any modifications or technical developments affecting the conditions of use of the HDS Services, whether such modifications or developments are introduced by JOTELULU or imposed by the applicable legal framework.<\/p>\n

This information is provided with a minimum notice period of thirty (30) calendar days, subject to cases of urgency, in particular in the event of modifications or changes aimed at ensuring the security of data hosted as part of the HDS Service, or if this is required by the regulations in force.<\/p>\n

If a modification or change does not comply with the quality and performance indicators defined in the Contract, or with the aforementioned technical and organizational measures designed to ensure (a) the continuity of Services in the event of JOTELULU\u2019s failure, and (b) the protection of the Client\u2019s Health Data, JOTELULU undertakes not to implement it unless an agreement has been reached with the Client.<\/p>\n

4.10 Audit<\/p>\n

The Client can, under the conditions set out in the \u201cAudit\u201d article of the \u201cData Processing Agreement\u201d, audit the HDS Services.<\/p>\n

For the HDS certifications referred to in article 3 above, the Client can consult the latest certification audit report on request to JOTELULU\u2019s Client Support. This report can be consulted on JOTELULU premises.<\/p>\n

The Client can consult directly in its management interface, or by request to JOTELULU\u2019s Client Support, the traces of access by members of its staff to the resources made available to it within the framework of the HDS Services and on which Health data is hosted.<\/p>\n

HDS Services utilisation<\/strong><\/p>\n

5.1 Certification<\/p>\n

The Client ensures that it and any third party participating on its behalf in the activities related to the hosting of health data for which the Client uses JOTELULU HDS Services, hold an HDS Certificate of Compliance as provided for in Article L1111-8 of the French Public Health Code covering all the activities which they are respectively responsible for as described in Article R1111-9 of the French Public Health Code.<\/p>\n

5.2 Interested Third-parties<\/p>\n

If the Client acts on behalf of one or several data controller or for patients, the Client must ensure that the contract in force between it and the (a) Heath data subject and\/or (b) the Health data controller it it is action on the later behalf, includes the mandatory provisions of these Specific conditions, as stipulated in article R1111-11 of the French Public Health Code.<\/p>\n

5.3 Health data Portability<\/p>\n

Before the effective date of termination of the Service, the Client shall (i) perform the operations necessary to retrieve the Health data stored within the Service in the conditions of the article \u201cData Portability\u201d of the Data Processing Agreement, if needed with JOTELULU\u2019s assistance, and (ii) delete any data stored within the Service as required under applicable Law.<\/p>\n

5.4 Applicable Law<\/p>\n

The Client shall comply with the law applicable to the hosting of Health data. In case of application of the French Law, the Client shall notably comply with (i) the provisions of the French Health Public Code relating to the hosting of Health Data personal and (ii) with the applicable guidelines of the PGSSI-S.<\/p>\n

Contractual referent
\nFor all matters relating to the processing and security of health data covered by these Specific conditions, each of the parties designates the HDS contractual referent below.<\/p>\n

JOTELULU\u2019s HDS contractual contact:
\ndpd@jotelulu.com<\/p>\n

Client\u2019s contractual contact:
\nSecurity contact whose identity and contact details (email and telephone number) are recorded by the Client in its client account.<\/p>\n

The Client\u2019s contractual referent may be contacted by JOTELULU in particular for the handling of incidents having an impact on health data hosted as part of the HDS Services, and must, if necessary, be able to designate a health professional to the Service Provider.<\/p>\n","protected":false},"excerpt":{"rendered":"

Version November 2025 Specific conditions applicable to the \u201chosting of healthdata\u201d (only applicable to French clients in the healthcare sector) Definitions Capitalized terms shall have the meanings set forth below and, in the absence thereof, the meanings set forth elsewhere in the Contract. ANS : Agence du Num\u00e9rique en Sant\u00e9. Health data: Personal data related […]<\/p>\n","protected":false},"author":11,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-76524","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nHDS Addendum - Jotelulu<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HDS Addendum - Jotelulu\" \/>\n<meta property=\"og:description\" content=\"Version November 2025 Specific conditions applicable to the \u201chosting of healthdata\u201d (only applicable to French clients in the healthcare sector) Definitions Capitalized terms shall have the meanings set forth below and, in the absence thereof, the meanings set forth elsewhere in the Contract. ANS : Agence du Num\u00e9rique en Sant\u00e9. Health data: Personal data related […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/\" \/>\n<meta property=\"og:site_name\" content=\"Jotelulu\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-18T15:39:11+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/hds-addendum\\\/\",\"url\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/hds-addendum\\\/\",\"name\":\"HDS Addendum - Jotelulu\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/#website\"},\"datePublished\":\"2025-11-18T15:37:20+00:00\",\"dateModified\":\"2025-11-18T15:39:11+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/hds-addendum\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/hds-addendum\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/hds-addendum\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HDS Addendum\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/\",\"name\":\"Jotelulu\",\"description\":\"Cloud Paradise for Tech Companies\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/jotelulu.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HDS Addendum - Jotelulu","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/","og_locale":"pt_PT","og_type":"article","og_title":"HDS Addendum - Jotelulu","og_description":"Version November 2025 Specific conditions applicable to the \u201chosting of healthdata\u201d (only applicable to French clients in the healthcare sector) Definitions Capitalized terms shall have the meanings set forth below and, in the absence thereof, the meanings set forth elsewhere in the Contract. ANS : Agence du Num\u00e9rique en Sant\u00e9. Health data: Personal data related […]","og_url":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/","og_site_name":"Jotelulu","article_modified_time":"2025-11-18T15:39:11+00:00","twitter_card":"summary_large_image","twitter_misc":{"Tempo estimado de leitura":"11 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/","url":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/","name":"HDS Addendum - Jotelulu","isPartOf":{"@id":"https:\/\/jotelulu.com\/pt-pt\/#website"},"datePublished":"2025-11-18T15:37:20+00:00","dateModified":"2025-11-18T15:39:11+00:00","breadcrumb":{"@id":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jotelulu.com\/pt-pt\/hds-addendum\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/jotelulu.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"HDS Addendum"}]},{"@type":"WebSite","@id":"https:\/\/jotelulu.com\/pt-pt\/#website","url":"https:\/\/jotelulu.com\/pt-pt\/","name":"Jotelulu","description":"Cloud Paradise for Tech Companies","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jotelulu.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"}]}},"_links":{"self":[{"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/pages\/76524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/comments?post=76524"}],"version-history":[{"count":1,"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/pages\/76524\/revisions"}],"predecessor-version":[{"id":76527,"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/pages\/76524\/revisions\/76527"}],"wp:attachment":[{"href":"https:\/\/jotelulu.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=76524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}