Help us design Tournée facile

Tournée facileTournée facile

Data security

Health data treated as health data

Your health data is hosted in France with a certified provider, your photos are encrypted, and no other practice can reach them. This isn't an option bolted on at the end.

Become a testerAsk a question
Diagram illustrating the encryption of patient documents and media

Today, without Tournée facile

  • Wound photos asleep in a personal phone's gallery.
  • Patient information passed around on a consumer messaging app.
  • No idea where your data actually sits.

With Tournée facile

  • Photos live inside the app, encrypted, not in your camera roll.
  • Exchanges go through a space built for health data.
  • You know where your data is: in France, with an HDS-certified provider.

What it actually changes

Certified hosting, in France

The app runs with a certified health data host (HDS), on French soil. That is the regulatory requirement for hosting a care record, and we are not looking for a way around it.

Your photos, unreadable without the app

Photos and voice notes are encrypted file by file before being written to disk (AES-256-GCM, envelope encryption). Taken as they are, they would show nothing.

One practice never sees another

Every read is checked on our servers. Data that doesn't belong to your practice isn't hidden: it is not findable, which is not the same thing.

Emails that give nothing away

Our notifications name no patient: just an invitation to open the app. Even on a locked screen, in the middle of a waiting room, they reveal nothing.

How it works

1

You sign in

Every member has their own account, never one shared account for the whole practice.

2

Every access is checked

Practice membership and role are verified on our servers, every single time.

3

Your data stays protected

Encrypted photos, certified hosting, and no health data in emails.

GDPR: our role and yours

Health data falls under article 9 of the GDPR, its strictest regime. You remain the data controller for your patients; we act as processor, with the obligations that puts on us. We say it plainly because you are the one who answers to your patients.

Frequently asked questions

In France, on HDS-certified infrastructure (French health data hosting certification).

We host your data to hand it back to you, and nothing else: it is neither sold nor mined for advertising. Even our notification emails name no patient.

You can request an export and then the deletion of your data, in line with GDPR.

Also worth a look

Practice & substitutes

Shared patients and rounds, roles that match the job, and a substitute up and running the moment they log in.

Learn more

Mobile & desktop

Android, iPhone and browser: one account, the same app, from one device to the next.

Learn more

Patient records

Contacts, care, observations and prescriptions for each patient, in one record that reads one-handed between two visits.

Learn more