Certified health-data hosting (HDS)
In production, data is hosted in France by a host certified for health data, or on your fire service's own infrastructure if it allows. The current demo contains no real data.
Health data
Security and health data
A firefighter's exposure data is health data, to be kept for decades. Here is how Carnet Expo CMR protects it, and what changes between the demo and your fire service's version.
Everyone sees only what concerns them
Individual exposure is restricted to the firefighter and the SSSM. Command sees the status of reports, never their content. The administrator can restrict access, never widen it. The rules are enforced by the server.
Access and corrections logged
Every view and every correction of a report is recorded. Once approved by the doctor, the report is locked. Annual records carry the doctor's sign-off and its date.
Retention over a whole career
At least 40 years for data on exposure to CMR agents (French Labour Code (Code du travail), R. 4412-93-3), 50 years for the exposure certificate (DGSCGC circular of 14 January 2025, circulaire DGSCGC du 14 janvier 2025). Export formats remain open: CSV and PDF.
Impact assessment prepared with your DPO
We provide the description of the processing, the register and the data protection impact assessment (DPIA, AIPD in French) template. No trackers, no advertising services. Firefighters are informed of their rights.
Your data remains yours
The data belongs to the fire service. It can be exported at any time, in full, in open formats. The contract provides for its return and deletion at the end of the service.
No exposure data sent to the AI
The assistant opens, searches and explains. It receives only the user's sentence, never their exposure data. It fills in and approves nothing, and the administrator can switch it off.
National formats and open exports
Call-outs received in the national exchange format (CISU, used by NexSIS), export of fire kit movements for your clothing-store software, CSV exports for the SSSM.
From demo to service
Demo and fire service version
The demo is for seeing the tool. Your fire service's version is installed on suitable hosting, with your accounts and your settings.
| Aspect | Demo | Fire service version |
|---|---|---|
| Data | Fictitious, generated in the browser | That of your firefighters and your call-outs |
| Hosting | Server in France, without HDS certification | Certified health-data host (HDS) in France, or the fire service's infrastructure |
| Accounts | One fictitious account per role, shared access code | Named accounts; single sign-on (SSO) with your accounts if you wish |
| Alerting | CISU messages generated or imported | Received from the alerting system, depending on the access granted |
| Reference values | VB Safety values to be validated | Coefficients validated by your chief medical officer |