A personalized formula comes with two inseparable responsibilities: protecting the data used to calibrate it and controlling every physical step leading to its production. Here are the controls we apply, their scope and the evidence we retain.
Health-data hosting, food-safety risk control and information-security governance serve complementary purposes.
HDS is the French acronym for Hébergeur de Données de Santé, the certification framework that governs the hosting of personal health data. For relevant processing, we use services and regions covered by our providers' applicable HDS-certified scopes, verified before use.
HACCP stands for Hazard Analysis Critical Control Point: a preventive method for identifying, assessing and controlling significant food-safety hazards. It is embedded in our Food Safety Plan.
Our Information Systems Security Policy defines the rules, responsibilities and controls that protect our systems and the data they process.
Confidentiality never relies on one label. Location, encryption, lifecycle, access control, logging, monitoring and incident response form a set of complementary safeguards. Our Information Systems Security Policy (ISSP) organises these controls.
What HDS hosting covers
For relevant processing, the services and regions we use are included in our providers' applicable HDS-certified scopes. This hosting framework complements our own application and organisational controls.
Persistent health data and structured blood-test extraction are configured in European regions. The original file is not archived: it is retained during analysis and any bounded technical retries, then deleted automatically.
Health data is encrypted at rest with AES-256 and protected in transit by TLS 1.2 or later. Secrets and access keys are kept separate from source code and restricted to authorised services.
Pages and responses containing personal or health data are never publicly cached. Before returning a minimal data projection, the API verifies authentication, resource ownership and authorisation on the server.
Every administrative account is individual and limited by role and need-to-know. Multi-factor authentication (MFA) requires at least two distinct identity checks. Privileged interfaces additionally require an authorised identity and device through a dedicated network access gate.
Access to health data and sensitive actions is logged. Operational events remain technical and minimised: they contain no blood-test document, clinical value or free-form content received from a provider.
Critical workflows and selected security signals are monitored automatically. Durable data is backed up in encrypted form and restoration procedures are exercised. A formal process covers detection, containment, investigation, recovery and legally required notifications.
Our Food Safety Plan covers biological, chemical, physical and allergen risks. Each step has acceptance criteria, expected evidence and a blocking rule if a deviation occurs.
Each supplier-product combination is assessed before selection against regulatory compliance, specifications, analytical controls, traceability and material-specific risks. Qualification is reassessed after any significant change or signal.
We check product and batch identity, quantity, integrity, labelling, shelf life, expected conditions and appearance. Where the product policy requires a batch-specific Certificate of Analysis, it must exactly match the received batch and meet its specifications.
Workwear, handwashing, behaviour in production areas and fitness to handle products are controlled. Segregated storage, production order, identified equipment and enhanced cleaning govern allergen-profile changes.
Operators are instructed and qualified for their tasks. Critical equipment has a lifecycle record; equipment that is unavailable, unqualified for its intended use or subject to a failed check is blocked.
Each production run links the frozen formula, actual material batches, operator, cleaning evidence, equipment and applicable checks. A correction supplements the history without erasing the previous attempt.
Pouch integrity, seal quality, label, net content where required, completeness and parcel matching are checked before release. Any blocking deviation stops the operation until a documented decision is made; a targeted withdrawal or recall can be initiated where necessary.
We don't outsource trust. Every step, from the choice of raw material to the formula shipped to you, stays under our control.
Qualified sourcing
Raw materials selected from qualified supplier-product combinations, against documented criteria covering regulatory compliance, purity, traceability and bioavailability.
Batch-level control
Every batch received is identified and checked on receipt. Analytical documents, including a Certificate of Analysis where required by our risk-based policy, are reviewed before use.
Calibrated formulation
Your biological profile defines the composition, dosed to the milligram.
Made in France
Your formula is weighed and assembled in our French laboratory, under batch-by-batch traceability.
Label and shipping
Your named formula is labelled, then shipped within 24 business hours.
See the maximum composition of the reference formula and the general specifications that frame our quality controls.
Quality is not an adjective: it is a documented loop that proves what was planned, performed and decided.
Applicable procedures, criteria and responsibilities are written, approved and versioned.
Each expected control is completed by an authorised person and linked to the version followed.
Missing or failed evidence stops the affected operation until an explicit decision is recorded.
Audits, complaints, traceability exercises and lessons learned feed back into the system.
We publish commitments, their scope and the main categories of evidence. Full operational documents remain restricted to authorised people and competent authorities.
The holder of a certification, the framework applied and the general scope of a control are always stated without ambiguity.
Audit reports, logs, supplier findings, batch records and individual records are not published.
Topology, addresses, network rules, detection thresholds, recovery procedures and equipment parameters remain confidential.
These public sources explain the meaning and scope of the main frameworks referenced on this page.
Certification and accreditation frameworks published by the French Digital Health Agency.
View the ANS frameworkRegulation (EC) No 852/2004 on the hygiene of foodstuffs and procedures based on HACCP principles.
View on EUR-LexRegulation (EC) No 178/2002 laying down the general principles of food law, including traceability and withdrawal.
View on EUR-LexPurposes, recipients, retention periods, transfers and how to exercise your rights.
Read the privacy policy