Three pillars for total trust
In the pharmaceutical industry, data confidentiality and regulatory compliance are not options — they are prerequisites.
A French solution end to end
Hally-pharma is designed, developed and hosted in France, with no offshore subcontracting anywhere in its production chain. All your project data is stored with OVHcloud, a French operator subject to French and European law (GDPR), across two datacenters located in France: Gravelines (GRA, primary hosting) and Roubaix (RBX, secondary hosting). No transfer to third countries, no dependency on extraterritorial legislation such as the US CLOUD Act.
Data protection and confidentiality
Hally-pharma is hosted exclusively on certified infrastructures located in France. Your data remains under French and European jurisdiction, protected by TLS 1.2/1.3 encryption in transit and AES-256 at rest. Customer data is strictly isolated through a secure multi-tenant architecture with database-level access controls, and all access is logged for complete traceability. Passwords are subject to a complexity policy and stored in hashed form, never in plain text.
Cybersecurity audit by an independent external body
The security of Hally-pharma is assessed by ORHUS Cyber Security, an external and independent cybersecurity firm with no ties to our development team, on the occasion of every major update introducing new features. Each audit combines two complementary approaches: black box (testing with no prior information, simulating an external attacker) and grey box (testing with user accounts provided, simulating an authenticated malicious user).
The latest audit (v1.0 — 05/19/2026) concluded an overall security level of HIGH, close to market best practices, with no vulnerability capable of affecting the confidentiality, integrity, or availability of the application. The ORHUS attestation can be provided upon request.