OVH Cloud HDS v2
Roubaix · Gravelines
All production servers · Docker containers · FHIR R4 PostgreSQL · S3 object storage for patient documents.
Sovereign stack
100% French.
0% GAFAM.
Our tech stack is sovereign, transparent, auditable. Here is exactly what we use.
Hosting
Three infrastructures, all in the EU.
No server outside the EU. No critical dependency on a vendor subject to the Cloud Act.
Scaleway HDS v2
Paris
Off-site DRP backup · multi-AZ redundancy · vendor isolation (not all our eggs in one basket).
OVH AI Labs · A10 / A100
Roubaix
GPU for serving Mistral 7B + Phi-3 + CamemBERT-bio · offline fine-tuning · nightly batch inference.
No server outside the EU
Open-source stack
Open-source or European bricks.
Tech choices motivated by sovereignty, auditability and long-term independence.
NestJS
API · TypeScript
MIT
Next.js 16
Web · React 19 · Turbopack
MIT
PostgreSQL
Database · ACID
PostgreSQL License
HAPI FHIR
FHIR R4 interop · Java
Apache 2.0
Mistral 7B · Llama 3.1
Self-hosted LLMs
Apache 2.0 · Llama license
CamemBERT-bio
French medical NER
Apache 2.0
Keycloak
IAM · SSO · OIDC
Apache 2.0
Temporal.io
Durable workflow orchestration
MIT
OpenTimestamps + Bitcoin
HMAC consent ledger anchoring (V1 delivered)
LGPL
Qdrant
Vector embeddings
Apache 2.0
What we DON'T use
Four exclusions, non-negotiable.
Azure / AWS / Google Cloud
Subject to the US Cloud Act — a US judge can demand our data without our consent. Excluded in production.
OpenAI / Anthropic Claude (production)
Useful tools in offline dev POCs, but no patient data flows through these APIs in production. Production = Mistral EU.
Meta Pixel / Google Ads (advertising)
No advertising pixels, no retargeting, no Google Ads on the site. Our audience measurement is limited to Matomo (self-hosted in France) and Google Analytics 4 (anonymized IP, strict opt-in, disabled by default and revocable from the cookie banner).
Vidal (Japanese marketing group)
Drug database owned by a marketing group. Conflict of interest. We use Thériaque + ANSM + RxNorm (open / public).
Targeted certifications
Five certifications, clear roadmap.
No greenwashing. Every milestone has a target date and a measurable deliverable.
HDS v2
Acquired
OVH + Scaleway infra HDS v2 certified (certificate number published).
ISO 27001
Target Q4 2026
Information security management system — gap analysis Q2 2026.
SecNumCloud
Target V2
ANSSI sovereignty visa — pursued if ARS / public-sector partnership.
CE IIa Track C
Target Q4 2027
Clinical decision support · LNE-GMED Notified Body.
CE IIb Track E
Target 2028
Predictive models (cardio risk, oncology) · MDR class IIb.
Partially open-source code
Public good vs. competitive moat.
French medical NER · open-source
Our fine-tuned CamemBERT-bio models are published on HuggingFace. Public good — the French medical community benefits.
FHIR France Core mappers · open-source
Public npm libs for ICD-10 / CCAM / LOINC mapping to FHIR R4 France Core. Shared standard.
Predictive models · proprietary
Cardio risk, oncology and other predictive models remain proprietary. Competitive moat on which MDMC's durability rests.
See the full architecture
How these bricks fit together to form a sovereign, encrypted, portable health passport.