The verdict in three sentences
A compliant electronic patient record (EPR) requires HDS-certified hosting billed between 300 and 2,000 EUR/month depending on volume, encryption at rest and in transit, and full traceability of access. Development ranges from 40,000 to 150,000 EUR ex. VAT depending on modules and integrations. The 5 to 9 month timeline includes the GDPR impact assessment, security testing and migration of existing data.
Compliance requirements and their cost
Compliance is not a side deliverable: each regulatory requirement maps to an identifiable development and operating line.
| Requirement | Implementation | 2026 cost (EUR ex. VAT) |
|---|---|---|
| HDS-certified hosting | Approved host contract | 3,600-24,000/yr |
| Encryption at rest + transit | AES-256, TLS 1.3 | 3,000-8,000 |
| Access traceability | Full logging | 4,000-10,000 |
| GDPR consent management | Registry + evidence | 3,000-7,000 |
| Impact assessment (DPIA) | Prior study | 4,000-9,000 |
| Backups and DRP | Redundancy + tests | 3,000-12,000/yr |
EPR development lines
The application core structures health data, manages rights by profile and ensures interoperability with existing tools.
| Module | 2026 range (EUR ex. VAT) | Priority |
|---|---|---|
| Patient data model | 8,000-20,000 | Critical |
| Rights management by profile | 5,000-12,000 | Critical |
| Interoperability (HL7/FHIR) | 8,000-25,000 | High |
| Clinical entry interface | 10,000-30,000 | High |
| Historical data migration | 5,000-18,000 | Depends on legacy |
| Secure patient portal | 6,000-15,000 | Optional |
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Sophie, director of a follow-up care facility in Nantes, launches an EPR for 60 professionals. The build lands at 95,000 EUR ex. VAT, HDS hosting at 900 EUR/month i.e. 10,800 EUR/year, and maintenance at 16,000 EUR/year. Over five years total cost reaches 229,000 EUR, but removing paper re-entry frees the equivalent of 1.5 admin FTE, valued at 60,000 EUR/year, delivering a return well before term.
FAQ
What makes a host HDS-compliant? It must hold HDS certification, granted on the basis of ISO 27001 extended with health-specific requirements. Require proof of certification and data location before any commitment.
Is a DPIA mandatory? Yes, for large-scale health data processing a data protection impact assessment is required by GDPR. Budget 4,000 to 9,000 EUR depending on complexity.
What does HL7/FHIR interoperability mean? These are health data exchange standards letting your EPR communicate with labs, imaging and national platforms. Budget 8,000 to 25,000 EUR depending on flows.
How long must patient data be kept? Legal retention periods vary by care type; the EPR must handle archiving and automatic purge. This configuration is part of scoping.
Can the project be phased to smooth the budget? Yes, by first delivering the compliant core and clinical entry, then interoperability and the patient portal. Phasing spreads the investment over 2 to 3 fiscal years.
Let's scope your project. Tell us your professional headcount, interoperability needs and legacy data to migrate for a compliant estimate. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
