> For the complete documentation index, see [llms.txt](https://docs.extrahorizon.com/extrahorizon/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.extrahorizon.com/extrahorizon/exh-platform/compliance/certification/hebergeur-de-donnees-de-sante-hds/hdh-representation-of-guarantees.md).

# HDH Representation of Guarantees

<table><thead><tr><th width="195.08203125">Business name of the actor</th><th width="156.640625">Role in the hosting service (Host/processor of the Host)</th><th width="121.3359375">HDS certified</th><th width="114.7265625">SecNumCloud 3.2 qualified</th><th width="167.53125">Hosting activities in which the player is involved</th><th width="275.0078125">Access to personal health data from countries outside the European Economic Area, by the Host or one of its processors (Requirement No 29 of the HDS framework)</th><th width="220.34375">Host or processor subject to a risk of access to personal health data from countries outside the European Economic Area, imposed by the legislation of a third country in breach of EU law (Requirement no 30 of the HDS framework)</th></tr></thead><tbody><tr><td>Extra Horizon</td><td>Host</td><td>Yes</td><td>No</td><td>1,2,3,4,5,6</td><td>No, no access to data from a country outside the European Economic Area</td><td>No</td></tr><tr><td>Amazon Web Services (AWS)</td><td>Procesor</td><td>Yes</td><td>No</td><td>1,2,3,4,5,6</td><td>Yes, covered by an adequacy decision within the meaning of Article 45 of the GDPR: US</td><td>No, Extra Horizon engages only subprocessors that participate in the EU-U.S. Data Privacy Framework, which provides an adequacy mechanism under Article 45 of the GDPR.</td></tr><tr><td>MongoDB</td><td>Processor</td><td>Yes</td><td>No</td><td>4,5,6</td><td>Yes, covered by an adequacy decision within the meaning of Article 45 of the GDPR: US</td><td>No, Extra Horizon engages only subprocessors that participate in the EU-U.S. Data Privacy Framework , which provides an adequacy mechanism under Article 45 of the GDPR.</td></tr></tbody></table>
