Security, privacy
& GDPR
Manu sets out the information a practice needs to assess trust: where data is held, who can access it, how long it is retained, what HDS hosting covers and what remains the practitioner's responsibility. Final clinical approval always remains with the practitioner.
6 key points for trust
A short overview of the main points, without unnecessary jargon.
- Access is controlled and is not granted to the whole practice by default.
- Encryption in transit and at rest is part of the technical foundation described by Manu.
- Data minimisation remains a central principle: collect only what is needed.
- Application data is hosted on AWS in Paris; video consultations also use a control API in Frankfurt. Manu's contractual HDS scope remains to be validated.
- The practitioner and practice retain their responsibilities for approval and use.
- The GDPR annex describes roles and processing; the complete list of subprocessors and the contractual scope should be checked for the features used.
Your data journey
From appointment to follow-up: the patient record brings together information useful to the practitioner; Théra gives the patient access to shared items and allows them to send feedback.
| Step | Where | Who | Retention period |
|---|---|---|---|
| Consultation | Practice / practitioner's device | Practitioner | Depending on use |
| Consultation audio | Transcription processing | Authorised services | Deleted after processing, normally within 24 hours* |
| Transcription | Secure storage | Practitioner + services | According to practice policy |
| Outputs | Patient record | Practitioner | According to practice policy |
| Programme and feedback | Patient record / Théra space | Practitioner; patient for shared items | According to the practice's instructions and obligations |
| Video consultations | Media in Paris; control in Frankfurt | Authenticated and admitted participants | No recording; metadata retained for 30 days** |
| Exports | PDF / text | Recipients chosen by the practitioner | Under the practice's responsibility |
* Audio is automatically deleted after processing, normally within 24 hours at the latest, except in the event of a documented technical incident, legal requirement or justified security need. ** Video consultation metadata expires 30 days after the scheduled start, with asynchronous deletion. Patient records, accounts and backups follow separate rules.
In practice
What the platform covers, what depends on configuration and what the practice needs to review.
What Manu explains
- encryption, access control and data minimisation
- a clearly presented GDPR framework
- reference pages to answer a practice's questions
What depends on configuration
- features used and associated providers
- retention periods
- the exact export, archiving and deletion procedures
What the practice must validate
- the authorised scope of use
- information and confidentiality obligations
- the necessary settings and internal documents
What this means for a practice
An evidence-focused overview: location, access, retention, limitations and contractual framework.
Where the data is held
The application infrastructure uses AWS in Paris. Video consultations use media in Paris and a control API in Frankfurt. The DPA scope and operational responsibilities must be checked for your organisation.
Who can access it
Access is not shared by default: it depends on the accounts, roles and permissions defined for the practice. The aim is to limit access to what is necessary.
How long it is retained
Retention periods depend on the settings, the practice's obligations and its chosen policy. They should be documented and consistent with actual use.
What HDS hosting covers
AWS publishes HDS certification covering certain services and regions, including Paris. It does not automatically certify Manu. Manu's own contractual and operational coverage remains to be established. View the scope published by AWS.
What Manu does not do
Manu does not make a diagnosis, decide on your behalf or exempt the practice from its own procedures. Read what Manu is not.
Your practice's responsibilities
Choosing access permissions, informing patients, setting retention policies, reviewing before export and maintaining documentation remain the practice's responsibility.
Request the contractual framework / DPA
For a practice or organisation that wants to go further, the appropriate next step is to request the contractual framework, allocation of roles and documents relevant to its internal compliance.
The scope of video consultations
The patient authenticates and consents to the session; the practitioner controls admission. Video and audio are encrypted in transit using Amazon Chime SDK, with no promise of end-to-end encryption. No recording is enabled within this scope.
Session metadata is stored in DynamoDB in Paris, with a technical expiry 30 days after the scheduled start; deletion is asynchronous. This period does not apply to patient records, patient accounts or backups, which follow separate rules.
See the calendar and video consultation workflow · View the service information and supporting documents
Explore resources by need
Choose the topic that matches your profession or the question you would like to explore.
FAQ
Direct answers designed to be clear for a practice.
What data is processed?
The patient record and appointments, consultation notes or optional audio, documents, programmes and instructions, and questionnaires and feedback submitted in Théra. Video consultations transmit audio and video during the session, without recording, and process technical metadata. Each feature should be limited to the information it needs.
Where is data stored?
Application data is hosted on AWS in Paris. For video consultations, media is configured in Paris and the control API in Frankfurt. AWS's HDS certificate does not constitute certification of Manu; the contractual scope and operational responsibilities remain to be validated.
Is Manu GDPR-compliant?
GDPR compliance is more than a badge. Manu is designed around data minimisation, security and access control; the practice remains the data controller, and the GDPR annex sets out Manu's role as processor, the responsibilities and the contractual scope.