For DSI, RSSI and DPO
From idea to a
sustainable, auditable and guaranteed application
Your business units design their applications with AI. From interview to production deployment, everything happens within an ISO 27001 and HDS certified perimeter, hosted in France, including the AI model. Your GDPR compliance, meanwhile, is documented as you go.
- ISO/IEC 27001:2022 — Information Security
- HDS V2 — Health Data Hosting
- Sovereign — Hosting in France
- RGPD — Registry and dossier generated natively
- Make
AI-assisted interview, formalized needs, rules validated by a human.
- Run & Evolve
Common low-code foundation, continuous controls, retro-documentation.
- Prove & Guarantee
Proofs ready for your audits, commitment adapted to criticality.
Your business units want to move fast.
You must keep control.
Accelerating development is useless if each new application adds maintenance debt and compliance risk.
Translating the need
Incomplete or ambiguous requirements, gaps between specifications, user stories and development.
Maintaining over time
Knowledge concentrated among a few experts, documentation quickly outdated, recurring MCO costs.
Demonstrating control
Expensive audits, scattered evidence, hard to measure deviations after deployment.
The regulatory framework, integrated from the start
Each application inherits the platform's certifications.
AI-assisted design, execution and hosting happen on the same certified platform, controlled by an independent body. The AI model also runs within this perimeter: exchanges with your business units never leave this scope. Your teams have no additional steps to take.
Health Data Hosting
In France, hosting personal health data on behalf of a third party requires a certified HDS host.
What this means for you: Your teams create applications handling patient or resident data without seeking or contracting an additional host.
Version 2022
The international standard for information security management: risk management, access control, continuity, continuous improvement.
What this means for you: Your RSSI has a recognized basis to evaluate the platform, and business applications inherit this level of security.
RGPD
Your GDPR compliance, simplified and demonstrable.
Health data is among the sensitive data protected by GDPR. With Forge, the platform generates the elements your DPO needs, instead of having to manually reconstruct them.
Processing Register
The application's GDPR register and dossier are generated from its actual design.
Data Subject Requests
GDPR requests are tracked and followed in your client space.
Anonymization outside production
Sensitive data is anonymized before any export outside the production environment.
No third-party AI subcontractor
The AI model runs within the certified perimeter: no external AI provider to declare or manage. All flows are encrypted.
Action traceability
Authentication, rights management and audit log are integrated into each application.
Regulatory rules locked in
HDS and GDPR constraints are formalized from the start: AI can no longer contradict them during evolutions.
Compliance becomes a derivative product of operations.
The goal is not just to be compliant, but to be able to demonstrate it at any time.
Daily vulnerability report
Security patches are applied without delay.
Regenerated documentation
Always faithful to what runs in production.
Proofs at each cycle
Process compliance proven at every update.
External security audit
Conducted by an independent provider.
Deviation detected before deployment
Functional, quality or compliance-related.
Dedicated Quality Cell
Aligns the application, data and regulatory requirements.
A commitment adapted to the criticality of each application.
Prove & Guarantee: quality is not promised, it is demonstrated.
Enable
Provide the means
Access to the platform, maker training, design standards, on-demand expertise.
Deliver & Control
Guarantee the result
Full support from A to Z: design, quality controls, documentation, MCO and regular indicators.
Assure
Secure a critical activity
Full support from A to Z: design, quality controls, documentation, MCO and regular indicators.
A new AI layer, on a proven foundation.
Forge's AI layer is built on a low-code platform in production for over ten years, at large scale.
+10 years
of low-code platform operation
+100
developed applications
+15000
distinct users connected daily
The ISKernel Forge range
Each business unit its product. From idea to decision.
Six products cover the entire lifecycle of your applications, from requirement gathering to data exploitation.
Discover the Forge rangeForge for MOA
Forge for Maker
Forge for UI
Forge for Integration
Forge for Auditor
Forge for BI
Let's measure results on a pilot application.
Let's choose together a high-value business need, with a limited scope and identifiable compliance requirements. From idea to proof, each step is tracked.
Speed
Time between idea and first prototype, number of clarification back-and-forth.
Quality and maintainability
Pre-production anomalies, time to resume by a new maker, projected MCO load.
Auditability
Documentation coverage, requirement / development traceability, time to generate proofs.