The verdict in three sentences
As soon as an application hosts or processes personal health data on behalf of a third party, HDS certification is a legal obligation, not an option. In 2026, moving from a generic cloud to an HDS-certified host (OVHcloud, Scaleway, among others) adds 30 to 60 % in cost, typically 300 to 1,500 EUR / month depending on volume. The real risk is not that premium but non-compliant hosting: contract nullity, regulator reporting and lost credibility with healthcare institutions.
HDS or generic cloud: the real cost gap
HDS certification imposes security, traceability and reversibility requirements that a generic host does not guarantee contractually. Here is the typical 2026 gap.
| Criterion | Generic cloud | HDS host |
|---|---|---|
| Indicative monthly cost | 200 – 900 EUR | 300 – 1,500 EUR |
| Premium vs generic | — | +30 to +60 % |
| HDS certification | No | Yes |
| Compliant HDS contract | No | Yes |
| Access traceability | Variable | Mandatory |
| Guaranteed reversibility | Rarely | Yes |
The premium covers certified infrastructure, the host's annual audit and the specific contractual commitments required by the HDS framework.
The obligations you cannot miss
Compliance is not just about picking the right host: it commits the vendor on several fronts. Here are the items to budget for a compliant launch.
| Obligation | 2026 detail | Order of magnitude |
|---|---|---|
| Signed HDS contract | Reversibility, traceability clauses | Included with host |
| Data protection impact assessment (DPIA) | Mandatory for sensitive data | 2,000 – 6,000 EUR |
| Processing register | Kept and updated | Internal / DPO |
| Encryption at rest & in transit | AES-256 / TLS 1.3 | Included in dev |
| Access logging | Retention 6 months min. | Included in infra |
| Regulator notification on incident | Within 72 h | Documented procedure |
The DPIA is the document the regulator will ask for first in the event of an audit.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Mini case study
Sophie, director of a medical remote-monitoring software vendor in Lyon, migrates her 4,000-patient application from a generic cloud at 480 EUR / month to an HDS host at 760 EUR / month. The premium is 280 EUR / month, i.e. 3,360 EUR / year, plus a DPIA at 4,000 EUR in year one. Year-one total: 7,360 EUR. In return, HDS compliance unlocks three hospital tenders representing an estimated 90,000 EUR pipeline. The return is obvious: Sophie secures compliance for under 8 % of the value of the first target contract.
FAQ
Who is subject to the HDS obligation? Any organization hosting personal health data on behalf of a data controller: health software vendors, telemedicine platforms, patient-monitoring applications.
Can you self-host without certification? No, if you host for a third party. A practitioner self-hosting for their own patients falls under a separate regime, but as soon as a third party is involved, HDS certification applies.
What does the HDS premium really cost? In 2026, budget 30 to 60 % more than a generic cloud, i.e. 300 to 1,500 EUR / month depending on data volume and traffic.
How long to become compliant? If you choose an already-certified host, aligning your application usually takes 4 to 8 weeks, including the DPIA and technical adjustments.
What is the risk of non-compliance? Nullity of the hosting contract, regulator sanctions (up to 4 % of global turnover under GDPR) and exclusion from public healthcare tenders.
Let's scope your project. Share your patient volume, data flows and deadline: we frame HDS hosting, the DPIA and a compliant architecture. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
