HDS-Certified Hosting in 2026: Which Cloud Providers Actually Support a Compliant Migration for French Health Data?

HDS certification is France’s mandatory, health-data-specific hosting framework, requiring organizations that host patient data to contract with providers certified for the relevant activities and to retain evidence such as scope annexes, data-processing agreements, localization commitments, and reversibility clauses. AWS, Google Cloud, Azure, OVHcloud, Scaleway, 3DS Outscale, NumSpot, and Claranet are identified as HDS-certified options, but compliance depends on using only the regions, services, backups, and operational activities included in each provider’s current certificate scope. The article distinguishes HDS from SecNumCloud, an optional ANSSI qualification focused on security and protection from extra-EU legal exposure that is often sought in public-sector or sovereignty-sensitive projects; 3DS Outscale and parts of OVHcloud’s offering are highlighted as qualified alternatives, while NumSpot is pursuing qualification. It emphasizes that cloud providers commonly cover infrastructure, platform, and backup activities, whereas responsibility for operating applications and systems holding health data usually remains with the customer or a certified managed-services provider. Safe migration practices include completing contracts and DPIA documentation before transfers, keeping production data out of lower environments, restricting access, encrypting data, validating restoration and reversibility, and maintaining logs and audit evidence. Qovery is presented as a non-HDS-certified deployment platform that operates within customers’ own certified cloud accounts rather than hosting patient data itself.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.