Your health data,
treated as such.
A main record hosted in France, access tied to your care, and choices explained at every step. Your health data is not sold.
Hosted in France
Main Sokrate record
Encryption
Vault documents encrypted
Your rights
A dedicated DPO contact
Never sold
No third-party advertising
Commitments, explained.
Primary hosting and processing carried out by partners are separate. Mailjet handles emails and M-target handles text messages in France. AI services and laboratory testing have their own terms. See recipients and transfers.
Record hosting
The main record is hosted in France on Google Cloud Platform. The provider’s HDS certification (France’s certification for health data hosting) applies to the services covered by its certification scope and contractual terms.
Information and rights
Our policy describes the purposes, the parties involved, the data used, the retention criteria and how to exercise your rights.
Assistance and transparency
AI helps clarify, structure and prepare documents. An automatically generated summary is distinct from a document validated by a professional.
Health research
MR-004 is a reference methodology of the CNIL, the French data protection authority. Each project must fall under the appropriate framework and come with specific information. Research is separate from your care.
Roles and authorizations
Professionals, coordinators and support teams act only within the scope of their role. Documents in the document vault are encrypted.
Optional uses
Optional referrals and communications are kept separate from care. You can change your choices and contact our DPO.
Your data belongs to you.
Rights that let you act.
Access
You can view all the data we hold about you at any time.
Rectification
Correct or complete any inaccurate or incomplete information.
Erasure
Request that your data be erased, subject to applicable retention obligations.
Portability
Receive your data in a structured format when the conditions for the right to data portability are met.
Objection
Object to the processing of your data on legitimate grounds.
Restriction
Request a temporary restriction on the processing of your data.
To exercise your rights, write to our Data Protection Officer (DPO): dpo@sokrate.com
Who sees what, when, and why?
The patient
Can request access to their data and its rectification, and change their choices. Within Mon bilan prévention, France’s national prevention check-up program, they can object to the plan being sent to their regular doctor (médecin traitant). Closing the account and retaining the medical record follow separate rules.
The doctor who authors the plan
Uses the answers and documents needed for your care. They assess the automatically prepared material and remain responsible for their clinical decisions. Preparing a document does not amount to medical validation.
The regular doctor (if authorized)
Receives the referral letter along with the Personalized Prevention Plan. The patient can explicitly object to this at any time.
Care coordination and tele-expertise
The coordinator follows the relevant steps of your care pathway. When a specialist opinion is requested, authorized staff prepare and validate the request before it is sent to the specialist. Access and sharing depend on the record, each person’s role and the choices you have made.
Metabolomic analysis (Nightingale Health)
When this analysis is offered to you, the sample, the analysis and the return of results involve a circuit separate from the questionnaire. The information provided before the service must specify the parties involved, the data transmitted, where it is processed and how long it is kept.
Medical research (MR-004 framework)
Reusing data for research requires a framework and information specific to each project. Pseudonymized data is still personal data. You can tell our DPO that you object, with no consequences for your care.
Sokrate relies on the official recommendations of the French National Authority for Health (HAS), French National Health Insurance (Assurance Maladie – Ameli) and medical societies. The service is not designed to handle emergencies and does not replace a medical consultation. In a medical emergency in France, call 15 (SAMU) or 112.
Reference documents: privacy policy · cookie policy · legal notice · have a question? Contact us.