One shared foundation, adaptable tools
Every tool works alone or with the others. Your workflows can evolve while identity, security, traceability and interoperability stay shared.
Six founding principles
Six straightforward rules for evolving workflows without weakening trust.
Absolute sovereignty
Hosting on sovereign infrastructure, HDS-certified (Scalingo), on Outscale infrastructure qualified SecNumCloud. No health data ever transits through foreign servers. 100% French production stack.
Native interoperability
FHIR R4 from the architecture up, not as an afterthought. Pro Santé Connect, ROR, DMP, MSSanté. Your data flows within the French health ecosystem.
Compliance by design
HDS, GDPR, PGSSI-S are not checkboxes at the end of a project. They are embedded in the architecture from day one.
Continuous evolution
A workflow request can be scoped, tested and delivered quickly, with the same permission, traceability and security controls.
Co-built with practitioners
Healthcare professionals propose improvements, vote, and earn credits when their ideas ship. The product evolves with real-world needs.
Transparent pricing
Pricing that reflects actual costs. The source code is fully auditable and transparent. No vendor lock-in.
Four layers, one common foundation
Each module deploys independently or assembles with the others. The layered architecture ensures separation of concerns.
Each building block works standalone AND integrates via the common foundation
Two deployment models
The service follows your organization, from an independent practice to a regional group.
Practices & small organizations
- ✓One tool of your choice or the Productivity Suite bundle
- ✓Patients and participants are free
- ✓Unlimited users for small organizations
- ✓Automatic updates and security patches
Practices from €9 excl. VAT/month · organizations from €690 excl. VAT/year
Institutions & territories
- ✓Isolated instance and database depending on the project
- ✓Multi-site, multi-service and white-label branding
- ✓INS, MSSanté, DMP and health-system connectors
- ✓Service commitments and deployment scoped by quote
For institutions, managing organizations, hospital groups and regional agencies
In both cases: the same compliant foundation, data portability and standard formats.
Five control layers before production
Every code change automatically passes through five verification levels before a human authorizes deployment to HDS production.
Secret detection
Gitleaks blocks any password, API key or certificate accidentally committed. No secret ever reaches the repository.
Static analysis (SAST)
Semgrep scans code with 4 rule sets (OWASP Top 10, Python, FastAPI, Secrets) + 6 custom HDS rules: SQL injection, JWT validation, PII logging.
Dependency audit
pip-audit, npm audit and Dependabot check every dependency daily against vulnerability databases (CVE, GHSA). Patches within 24h.
Automated tests
Over 5,000 unit and integration tests: RLS access control, encryption/decryption, FHIR AuditEvent audit trail, GDPR endpoints.
Human validation
No code reaches HDS production without explicit manual approval. Traced, timestamped, linked to the exact deployed commit.
unpatched critical CVEs
secrets in history
automated tests
tables with RLS
Discover each module
Ducal · 2026
Start with your most concrete need.
A one-month free trial to make sure the tool truly fits your practice.
Tell us about your project →