Security & compliance

Your data deserves the highest level of protection.

eBrigade is hosted in the EU (France & Germany), GDPR compliant, and HDS-eligible for health data (France). Earning your trust has been our priority since 2004.

🇪🇺 Hosted in the EU
🇪🇺 GDPR compliant
🏥 HDS available
🔐 TLS 1.3 + AES-256
✓ Security audited
🏥

Health Data Hosting (HDS)

eBrigade is eligible for certified health-data hosting (HDS) for organisations that need it: fire and rescue services, emergency medical teams, home-care providers and healthcare establishments. HDS mode can be switched on with the Custom plan.

  • HDS-certified infrastructure available on request
  • Separate HDS contract with a formal delegation of responsibility
  • Applicable to fire, rescue and medical emergency services and home care
  • Physical hosting in France only
🇪🇺

GDPR compliance

eBrigade Technologies is a French company subject to the European GDPR. All personal data belonging to your members — employees, volunteers and reservists — is processed in line with the regulation.

  • Designated Data Protection Officer (DPO)
  • Record of processing activities kept up to date
  • Right to erasure honoured: export and delete in one click
  • GDPR-compliant subprocessors (list available on request)
  • Data hosted in the EU (France and Germany)
🇪🇺

Sovereign EU hosting

Your data is hosted exclusively within the European Union — in France and Germany — in certified data centres. No transfers outside the EU. No reliance on non-European clouds.

  • Data centres in France and Germany (ISO 27001)
  • Encrypted daily backups
  • Disaster recovery plan tested annually
  • Zero dependence on AWS / Azure / GCP for your operational data
🔐

Encryption & technical security

eBrigade data is encrypted in transit and at rest. Access to the platform is protected by strong authentication mechanisms.

  • TLS 1.3 for all communications
  • AES-256 encryption of data at rest
  • Two-factor authentication (2FA) available
  • SSO (SAML 2.0, OAuth 2.0) available
  • Full access logging (audit trail)
HDS — Health Data Hosting

Built for organisations that handle health data

HDS certification is mandatory for anyone hosting personal health data in France. If your organisation works in the health or social-care sector, ask us to switch on HDS mode.

🚒
Fire & rescue services

Pre-hospital care data, incident records, medical assessments

🚑
Emergency medical teams

Patient records, medical crews, interventions

🏠
Home-care providers

Home-help services, beneficiary data

⛑️
Red Cross & first-aid charities

First-aid missions, event medical cover, care data

HDS hosting is available on the Custom plan. Get in touch for a quote and to sign the required HDS contract.

Request an HDS quote
Frequently asked questions

Security and data protection

Does eBrigade apply ISO 27001 security controls?

Yes. eBrigade applies the technical controls of the ISO 27001 framework: granular access control, encryption of data at rest and in transit, action logging, incident management, and protection against injection and XSS/CSRF attacks. These controls are audited internally and updated with every release.

How do I exercise a member's right to erasure?

From your eBrigade workspace, any member record can be anonymised or permanently deleted in one click. A full export of a member's data is also available to answer GDPR requests (data portability).

Where is my data physically stored?

Your data is hosted within the European Union — in France and Germany — in certified data centres. None of your files, member data or operational data is ever stored outside the EU.

What happens if I cancel my subscription?

You can export all of your data as CSV or JSON at any time from your eBrigade workspace. After cancellation, your data is retained for 30 days (in case you reinstate the account), then permanently deleted.

Is my organisation the only one with access to its data?

Yes. Every eBrigade account is strictly isolated. Your data is only ever accessible to your authorised users. eBrigade Technologies teams access your data solely with your explicit consent, for technical support.

A question about security or compliance?

Our team is on hand to answer your questions on GDPR, HDS or technical security.

Free 30-day trial No card required · No commitment · Ready in 2 min