Security, GDPR and hosting: understanding Manu's framework
This guide helps distinguish the hosting provider's certificate from the software provider's and practice's responsibilities. For current information about Manu, Théra and video consultations, see the main Security page.
Why explain security and data protection in detail
On a sensitive subject, precise information enables a practice to check the framework before adopting the tool.
Explain clearly
Provide more detail on what security, GDPR and hosting cover.
Provide verifiable information
Key information is brought together to make it easier for practices and their advisers to verify.
Offer reassurance without overpromising
Explain the safeguards, limitations and role of the practitioner or practice.
The main topics to explain
A clear framework is more useful than a security slogan.
Data and access
Who can access what, under which principles and with which controls.
Hosting and HDS scope
Application data is hosted on AWS in Paris; video consultations also use a control API in Frankfurt. AWS publishes HDS certification for certain services and regions. Manu's contractual and operational coverage remains to be established: the AWS certificate does not certify Manu.
Responsibilities
What falls to Manu, the practice and the practitioner.
Human review
Why practitioner approval remains central.
Good practice for deployment and use
These points help a practice prepare its assessment of the solution.
What to document clearly
- 1. Where data passes through.
- 2. What access is possible.
- 3. Which services are covered by the hosting provider's certificate and which responsibilities remain to be established for Manu.
- 4. Why outputs must be reviewed and approved.
Related pages
Related pages to explore
Find useful additional information to understand Manu before adopting it.
Security page
Return to the main Security page.
Privacy policy
See the dedicated legal page.
Contact
Ask a question or request the contractual framework.
ChatGPT vs Manu
Also compare the security approach of general-purpose AI and a specialist tool.
About
Meet the team and discover the product philosophy.
FAQ
Direct answers designed to be clear and easy to understand.
Where can I find key security information?
The Security page is the reference for the data journey, access, retention and video consultations. This guide explains the questions to consider alongside the applicable contractual documents.
What does HDS hosting cover?
AWS publishes HDS certification covering certain services and regions, including Paris. This certificate does not automatically certify Manu. The service's own contractual and operational coverage remains to be established. The Security page describes the current locations and scope; the AWS website sets out the hosting provider's scope.
Which processors are involved?
The infrastructure relies in particular on Amazon Web Services EMEA SARL. Other providers may be involved depending on the features enabled, including authentication, email, payment, logging, support or text generation. The applicable version of theGDPR annex and the DPA must specify the list and agreed scope before activation.
Why emphasise human approval?
Because an AI assistant does not replace clinical responsibility or the need to review outputs.