Strict typing patches + Arabic RTL locales + E2E tests across 9 locales.
Transparency by design.
My Data My Care progressively releases the key technical components of its sovereign health architecture. Not all at once, not for marketing — following a public roadmap with explicit licenses.
- MIT license
- AGPL license
- Public roadmap
Why open source
Open source is not an end in itself but the lever of a broader promise: patient sovereignty rests on the ability to audit the code, not on blind trust.
Independent audit possible
Any security researcher, DPO or hospital CIO can read the code of the critical components without an NDA or a special request. Transparency is not a bonus, it's a prerequisite.
Real technical portability
An open source FHIR R4 FR Core SDK lets any patient or organization leave MDMC with their passport — to another operator, a DMP, a practice, with no lock-in.
Healthcare common good
French digital health needs shared building blocks: HDS validator, medical i18n presets, FHIR parsers. MDMC doesn't capture, MDMC contributes.
Components to release
A progressive release schedule. V1 = technical blocks usable on their own. V2 = a complete health framework.
A TypeScript library to consume our patient API + export the passport as FHIR R4. Compatible with Node, Deno, Bun, browser. Target Q3 2026.
A CLI tool for self-auditing HDS v2 compliance for health hosts. Exhaustive checklist + verification scripts. Target Q3 2026.
A next-intl module preconfigured for medical terminology in 9 locales (fr-FR/CH/LB, de-DE/CH, it-CH, en, en-LB, ar-LB). Target Q3 2026.
A cryptographic module HKDF + WebCrypto patient-side end-to-end encryption. Multi-profile family (HKDF sub-key per member). Target Q1 2027.
A consultation scheduling engine + health calendar. Compatible with iCal + INS-API. Target Q2 2027.
An open source CareFlow conversational bot (PHI anonymization + provider abstraction Mistral/Groq/Ollama). Target Q3 2027.
What we give back
Beyond MDMC's own code, we contribute regularly to the projects we use. A non-exhaustive list.
Issues on FR Core profiles + field feedback on Ségur V2 implementation.
PostgreSQL migration performance reports + health JSON field tests.
WCAG 2.2 AA accessibility components + health form presets.
Which legal framework
Two main licenses depending on the nature of the component. No proprietary-friendly license like BSL or SSPL — a real copyleft commitment on the critical health blocks.
Reusable technical blocks with no constraints. No copyleft. Allows maximum adoption by any ecosystem (commercial OK).
Critical health blocks: any SaaS fork MUST republish its changes. Prevents commercial capture without giving back. A protected common good.
Open source and sovereignty are inseparable: auditability of the code = a necessary condition for patient trust. An end-to-end encrypted architecture with no public code remains an act of faith.
See the Sovereignty pageA suggestion, an audit, a contribution?
Our technical team answers security researchers, health developers, CIOs and tech journalists. Responsible disclosure report within 48 business hours.