A digital journey is only acceptable
if it is safer.
HDS hosting, in France, encryption at rest, GDPR compliance. Every component is written by our teams: no health document passes through a third-party service. And responsibility does not move.
- HDSHDS hosting, in FranceHealth data hosted in France on HDS servers
- GDPRGDPR-compliantDocumented processing and patient rights respected
- FRData processed in FranceHosting and processing on French territory
- French publisher, everything written in-houseEvery critical component is written by our teams; pharmacists oversee the product
Where the data is,
and who can access.
Hosted in France, on HDS servers. No health document passes through a third-party service.
- HDS hosting, in FranceYour patients' health data is hosted and processed in France, on HDS servers.
- No health document with a third partyMarketplace, catalogue, ordering journey, reservation, encrypted channel and reading pipeline: everything is written by our teams.
- A mandate the pharmacy owner signs● AvailableAccess to your management software's data requires an access mandate signed by the pharmacy owner, who remains the data controller.
- Roles and rights per workstation, in Nexum ProWho sees what, who processes what. Team access is by name and logged.
Two leaders, a CEO and a CTO — and a pharmacist on the team for operations and regulatory matters.
How it is protected.
A design constraint, not an option to switch on.
- Encrypted at rest, with AES-256-GCMConversation content is encrypted at rest with AES-256-GCM, each message with its own session key and a seal binding it to its conversation. Never “end-to-end”: we write what is attested.
- Time-stamped and loggedAudit log on delivery (sealed bag, QR code, four-digit code) and on exchanges between pharmacies; dispatches logged with proof; origin and freshness of every piece of data exposed.
- The switchboard does not go down if an AI provider goes downCritical service: several engines, automatic fallbacks. Artificial-intelligence R&D programme backed by Bpifrance, AI infrastructure controlled in France — ◔ rolling out.
- Fraud and controlled substances flagged at reading timeAlteration, reuse or inconsistency in a prescription: the doubt is raised with the pharmacist, not silently absorbed.
- A dedicated role, not an optionHealth data security is a dedicated craft at Nexum. A cybersecurity engineer position for the ecosystem is currently open for hire.
What we don't do.
Responsibility does not move. What is automated is data entry — never the decision.
No automated decisions
The checks add to the pharmacist's judgement; they do not replace it. Dispensing remains with the pharmacy owner.
No medical advice from an AI
No dosage, no interactions, no triage. A health question is transferred to the team with its context.
No data sold or shared
Your pharmacy's data and your patients' data serve your pharmacy alone. They are neither sold, nor transferred, nor used to train a model.
Call recordings
The retention regime for recordings is still being settled with the scientific board. The rule will be published here, whatever it is.
No health data leaves the HDS-certified servers located in France.
Frequently asked questions
Frequently asked questions about compliance and data security.
Where is the pharmacy's customer data hosted?
In France, on HDS servers. No health document passes through a third-party service.
Are calls to the voice assistant recorded?
Recording is an option each pharmacy turns on or off. When it is on, an information message plays at the start of every call; recordings are kept for 90 days, then deleted, and can only be accessed by the pharmacy's authorised team, in Nexum Pro.
How does Nexum access the pharmacy management software?
With an access mandate signed by the pharmacy owner, and the Nexum agent installed on a computer in the pharmacy. The status of each management system is published on the Integrations page.
Is the pharmacy's data used to train an AI?
No. The pharmacy's data and its customers' data serve the pharmacy alone; they are neither sold nor shared.
Is Nexum a medical device?
No. What is automated is data entry — never the decision: no dosage, no interactions, no triage. No CE / MDR marking is claimed.
What happens to the pharmacy's data if it cancels?
When the account is closed, from Nexum Pro or by email, the data is deleted within thirty days, or returned if the contract provides for it, except for data the law requires to be kept, such as accounting records.
Looking for more answers?
The privacy policy is public; for anything else, a pharmacist answers directly.
HDS hosting, in France · GDPR-compliant · French software publisher