Information Responsive to Hébergeur de Données de Santé (HDS) Requirement No. 31
Last updated: July 28, 2026
| Business name of the actor | Role in the hosting service | HDS certified? | SecNumCloud 3.2 qualified? | Hosting activities involving the actor | Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors | Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law |
|---|---|---|---|---|---|---|
| Couchbase, Inc. | Host: Couchbase Capella is a cloud-based NoSQL Database-as-a-Service that leverages Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure to host customer database contents, including any personal health data that customers may upload to and host in the Capella Cloud Service. | Yes | No | Activities 3-4 | Please see Question 6 in our Frequently Asked Privacy Questions about Couchbase Capella (https://www.couchbase.com/capella-privacy-faq/), which explains limited circumstances under which data stored in the European Economic Area (EEA) may be accessed or transferred outside of the EEA. Depending on a customer’s selections, when requesting Couchbase technical support, limited personal data may be accessed by Couchbase personnel in one of the locations listed in Section 1 (Couchbase Affiliates) of the Couchbase Cloud Service Subprocessor List found at https://info.couchbase.com/cloud-subprocessors.html/ (including Australia, Canada, France, Germany, India, Israel, Japan, Saudi Arabia, Singapore, Spain, United Arab Emirates, United Kingdom, or United States). | Yes. The Couchbase Capella Control Plane is hosted from the United States. But as stated under Question 9 in our in our Frequently Asked Privacy Questions about Couchbase Capella (https://www.couchbase.com/capella-privacy-faq/), Couchbase offers Capella users supplementary measures to mitigate the risk of unauthorized data access, including technical controls to manage access to and encryption of data stored in Capella and contractual commitments to give customers reasonable notice of law enforcement demands to allow customers to seek protective orders. |
| Amazon Web Services (AWS) | Processor of the Host: Provider of public cloud hosting services | Yes | No | Activities 1-4, 6 | Couchbase Capella customers select the Cloud Service Provider region(s) in which their personal health data will be hosted. See AWS supported regions linked here. | Yes. The Couchbase Capella Control Plane is hosted from the United States. But as stated under Question 9 in our in our Frequently Asked Privacy Questions about Couchbase Capella (https://www.couchbase.com/capella-privacy-faq/), Couchbase offers Capella users supplementary measures to mitigate the risk of unauthorized data access, including technical controls to manage access to and encryption of data stored in Capella. You can obtain HDS certification information directly from AWS at https://aws.amazon.com/compliance/hds/. |
| Google Cloud Platform (GCP) | Processor of the Host: Provider of public cloud hosting services | Yes | No | Activities 1-4, 6 | Couchbase Capella customers select the Cloud Service Provider region(s) in which their personal health data will be hosted. See GCP supported regions linked here. | Yes. The Couchbase Capella Control Plane is hosted from the United States. But as stated under Question 9 in our in our Frequently Asked Privacy Questions about Couchbase Capella (https://www.couchbase.com/capella-privacy-faq/), Couchbase offers Capella users supplementary measures to mitigate the risk of unauthorized data access, including technical controls to manage access to and encryption of data stored in Capella. You can obtain HDS certification information directly from GCP at https://cloud.google.com/security/compliance/hds. |
| Microsoft Azure | Processor of the Host: Provider of public cloud hosting services | Yes | No | Activities 1-4, 6 | Couchbase Capella customers select the Cloud Service Provider region(s) in which their personal health data will be hosted. See Azure supported regions here. | Yes. The Couchbase Capella Control Plane is hosted from the United States. But as stated under Question 9 in our in our Frequently Asked Privacy Questions about Couchbase Capella (https://www.couchbase.com/capella-privacy-faq/), Couchbase offers Capella users supplementary measures to mitigate the risk of unauthorized data access, including technical controls to manage access to and encryption of data stored in Capella. You can obtain HDS certification information directly from Microsoft at https://learn.microsoft.com/en-us/compliance/regulatory/offering-hds-france. |