Home›Customers›
Kiosk
GDPR
Software publisher specializing in management solutions for local governments and the healthcare and social services sector

Kiosc: The GDPR as a Natural Extension of Its ISO 27001 and HDS Certifications

As a software publisher serving local governments and the healthcare and social services sector, Kiosc handles sensitive data on a daily basis. After obtaining ISO 27001 and HDS certifications with our help, the company entrusted us with its outsourced DPO role to ensure its GDPR compliance.

Talk to an expert →
Certified
GDPR
·
Kiosk
3
Standards managed in collaboration with a single partner: ISO 27001, HDS, and GDPR
48 h
Commitment by the DPO to respond to urgent requests (within 5 days for routine requests)
150+
Kiosc customers whose data is protected
Background and Issues

A publisher that handles sensitive data

Kiosc develops online management software for local governments, businesses, and healthcare and social service organizations. Its clients entrust the company with personal data, including health information.

Already ISO 27001 and HDS certified, Kiosc also needed to ensure its compliance with the GDPR, a regulatory requirement central to its business. The company lacked dedicated internal resources. The requirements specific to sensitive data were complex, and no clear methodology existed to structure the process.

‍

“
Audrey, our DPO, is attentive, approachable, and, above all, very pragmatic. She knows how to address our challenges, including the most complex issues related to the protection of sensitive data and the specificities of the medical-social sector. We particularly appreciate her ability to understand our business challenges and provide us with concrete, tailored solutions, rather than limiting herself to a purely theoretical or regulatory approach.
Guillaume Magnier
Guillaume Magnier
CEO, Kiosc
Solution and Method

The Same Expert, from Certification to an Outsourced DPO

Kiosc first entrusted us with its ISO 27001 and HDS certifications. Satisfied with our support, the company continued working with us on GDPR compliance. The designated DPO is the consultant who had led its HDS project.

2022 – January 2024 · ISO 27001 and HDS Certification

16 months of support. The mock audit in November 2023 preceded the certification, which was obtained in January 2024.

2024 · Transition to ISO 27001:2022 and Team Training

Training on the new version of the standard and on maintaining the management system, organized into two groups.

April 2024 · Outsourced DPO designated by the CNIL

Cooperation with the supervisory authority and support on all GDPR-related matters.

2024 · GDPR Audit and Review of the Data Processing Register

Interviews with each department that handles personal data. The registry was reviewed in its capacity as a data controller and as a sub-

Day-to-Day Operations · Responsive DPO Support

We respond to standard requests within 5 days and to urgent requests within 48 hours.

2025–2026 · Maintaining Compliance

Renewal of the outsourced DPO, plus internal ISO 27001 and HDS audits in October 2024 and in 2026.

Results

Strong compliance, as recognized by the auditor

  • GDPR Compliance on Schedule
    Kiosc completed its GDPR compliance on schedule.
  • GDPR Compliance Praised in Audit
    The ISO 27001 and HDS certification auditor provided very positive feedback on GDPR compliance.
  • Enhanced Credibility
    Kiosc reassures its public and healthcare clients about the protection of their data.
  • Well-Equipped Teams
    The training sessions provided a better understanding of the requirements and practical tools for establishing a sustainable compliance framework.

‍

“
It’s truly reassuring to be able to count on a knowledgeable and responsive point of contact to support us on a daily basis with these matters. We highly recommend Feel Agile’s DPO services.
Guillaume Magnier
CEO, Kiosc
Video

The Complete Feedback Report

Customer Profile

Sector
Software publisher specializing in management solutions for local governments and the healthcare and social services sector
Size
Fewer than 50 employees
Reference Framework
GDPR
Duration
Outsourced DPO since April 2024, renewed for 2025/2026, following 16 months of ISO 27001 and HDS compliance support
Certification Body
AFNOR Certification
Certification
Feel Agile Offer
View the offer →

Thinking about getting certified?

Talk to an expert about your scope and timeline.

Talk to an expert

Need a DPO who understands your business challenges?

Our outsourced DPO provides you with day-to-day support regarding the GDPR and the protection of sensitive data.