--- title: "Security and data · Treats" description: "Where your data is, who can access it, what the AI does with it, and the GDPR: hosted in France, under your control." url: https://www.treats.vet/en/security-and-data/ lang: en-GB updated: 2026-11-07 --- Security and data # Your data, in France, under your control. Where it is, who can open it, what the AI does with it, and what the contract says. [Book a demo](https://www.treats.vet/en/book-a-demo/) ## Hosted in France. With Scaleway, in Paris. You know where your data is, and who to ask for it. * ### In Paris The practice database and files are with **Scaleway**, in France. * ### Two-factor authentication Mandatory for the Treats team, **enforceable for your whole team**. * ### Sealed invoices Invoices, credit notes and till closures are chained by hash: **any alteration is detectable**. * ### Backed up Automatic backup **every 24 hours**, kept for 30 days. ## Everyone opens only what concerns them. Role-based permissions, set by the practice. You can enforce two-factor authentication for the whole team, anyone can sign in without a password using a passkey, and the front-desk workstation opens with a personal code. ## Every action leaves a trace. Who changed a prescription, exported a register or changed a role, and when: the audit log keeps it. When the Treats team helps you, its session appears there too, with its reason. ## Nothing enters the record without you. What the AI does with your data, and what it does not. * ### The models Dictation is transcribed by Voxtral, then structured by Mistral Large, two models from Mistral AI. * ### At Mistral AI The recording is processed only for as long as it takes to check that it complies with the model's terms of use, then deleted. It is never used to train a model. * ### At Treats The recording is kept in France, with Scaleway, for the duration of the review: it is deleted as soon as you accept or reject Scribe’s suggestions. The transcript stays with the consultation. * ### Validation Scribe suggests. Nothing is written into the record until you have applied it. * ### The assistant It acts with your permissions, never more. It prepares invoices, estimates and prescriptions as drafts: it does not issue, send, sign or take payment for them. ## Who does what with your data. Under the GDPR, you are the data controller and Treats is your processor. The contract says what Treats may do with your data, and who it relies on. [Ask us about your data](https://www.treats.vet/en/book-a-demo/) * ### Scaleway **Hosting** of the database and files, in Paris. * ### Mistral AI **Artificial intelligence** behind Scribe, for Pro practices. * ### Mailjet and smsmode **Sending e-mails and SMS** to owners. * ### Crisp **Support chat** inside the software. * ### Your integrations IDEXX, Pennylane, your AI assistant… **only if you switch them on**. ## Your data remains yours. You bring it, you keep it, you take it back. * ### Migrated on arrival Your history is brought over from **your current software**, then checked with you before launch. * ### Exportable Accounting export (FEC), registers and each client's record in the software; **the full practice export** on request. * ### Deleted when you leave Once the export has been handed over, **the practice's data is erased**. [Switch to Treats](https://www.treats.vet/en/switch-to-treats/) ## Your questions about your data ### Where is my data hosted? In France, with Scaleway, in Paris. The practice database and files are kept there; they never leave the European Union. ### What happens to my data if I stop using Treats? It remains yours. You get the full export of the practice before you leave, then it is deleted. ### Can the Treats team see my records? Only to help you. Every support session carries a reason, is read-only by default and appears in your audit log. ### Is my data used to train an AI? No. The Mistral AI models used by Scribe are not trained on your data. ### Who is responsible for my clients' data under the GDPR? The practice is the data controller; Treats is its processor and processes your data only to run the software. ## A question about your data? We show you where it lives and who can access it, then we walk through all of Treats on situations from your own practice. [Book a demo](https://www.treats.vet/en/book-a-demo/)