One rule shaped the project.
The pharmacy's IT provider raised it early: in France, health data handled by digital tools must be hosted by a provider certified for it, known as HDS.
Client work · Health and care
Health data,
kept where it belongs.
A compounding pharmacy in France wanted an online platform for the preparation orders it receives from other pharmacies. Before anything was built, every tool was checked against France's rules for hosting health data.
- Client
- A compounding pharmacy in France
- Worked with
- The pharmacy's team and its IT provider
- Delivered
- A fillable order form and a regulatory annex
Three tools, checked against the rule.
Each tool first considered was checked against that rule. One offered a plan for a United States health data standard, but did not appear to be certified in France. One could be self hosted, but at a high cost and with a lot of work. One was not on the certified list.
New options, with their trade offs.
- Two certified online form tools, one of them with a dashboard of the forms received
- Fillable PDF forms, a lighter solution with no online platform holding the data
- An online platform for pharmacy orders
- Health data? The host must be HDS certified
- US standard onlyCostly to self hostNot on the certified list
- PossibleCertified online forms PossibleCertified online forms Delivered Fillable PDF forms Order formRegulatory annex
Built with the team, round by round.
Fillable PDF forms: the order form, and a one page annex on technical and regulatory validity used in the pharmacy's preparation work, with the usual answers ticked in advance. Each form was refined with the pharmacy over several rounds.
The cause of information lost from completed forms was also traced, mainly to forms received by fax. The team was shown a reliable way to save completed forms, with a note on which method is less suited to sensitive data.
Where the data goes comes first.
Every project starts with the same question: where will the data go, and who is allowed to hold it? The tools are chosen after that, not before. The same question sits behind each website, form and AI knowledge base built here.
Handling sensitive information?
Start with where it goes.
Tell a little about your business and the information it handles.