Cybersecurity & Sovereignty

Your pharmaceutical data hosted in France, protected by experts

Hally-pharma is hosted exclusively on certified infrastructures located in France. Your data remains under French and European jurisdiction. All communications with the platform are secured, and the infrastructure is regularly audited by an independent external cybersecurity organization.

Our commitments

Three pillars for total trust

In the pharmaceutical industry, data confidentiality and regulatory compliance are not options — they are prerequisites.

Hosting

Sovereign hosting in France

All your project data is stored on servers physically located in France, operated by providers subject to French and European law (GDPR). No transfer to third countries, no dependency on extraterritorial legislation such as the US CLOUD Act.

French datacenter GDPR compliance European jurisdiction Zero transfer outside EU

Confidentiality

Data protection and confidentiality

Hally-pharma is hosted exclusively on certified infrastructures located in France. Your data remains under French and European jurisdiction. Communications between your browser and our servers are secured using TLS encryption. Customer data is strictly isolated through a secure multi-tenant architecture with database-level access controls. All data access is strictly controlled and fully logged to ensure complete traceability.

TLS 1.3 encryption Isolated multi-tenant architecture Traced access

External audit

Cybersecurity audit by an independent external body

The security of Hally-pharma is regularly assessed by an external and independent cybersecurity firm, with no ties to our development team. These audits include penetration testing (pentest), infrastructure configuration review, and application risk analysis.

The findings of each audit result in a prioritized remediation plan, tracked and closed before the next campaign. This process ensures continuous, documented, and independent improvement of the security level.

Application pentest Remediation plan Independent body

What this means for you

Concrete guarantees, not promises

Each security commitment translates into verifiable technical and organizational measures.

Your formulas stay yours

Your products, processes, and equipment data are exclusively accessible by your organization. Hally-pharma does not exploit, resell, or share them.

No CLOUD Act, no FISA

By choosing a French host subject only to European law, your data cannot be claimed by foreign authorities based on US extraterritorial legislation.

Journaled administrator access

All access to production data by the Hally-pharma team is logged, timestamped, and auditable. No action is possible outside this tracked perimeter.

Availability and resilience

The infrastructure is designed for high availability with automatic and regular backups. In the event of an incident, a business continuity plan (BCP) is in place to minimize any disruption.

Audit report available on request

For your quality or IT teams, the summary report of the latest external cybersecurity audit can be shared under a confidentiality agreement. Contact us to request it.

Fine-grained access rights management

Each user accesses only the data their role authorizes them to see. Rights are managed by your administrator, modifiable at any time.