An investigation by Le Canard Enchaîné (June 2, 2026) revealed that Doctolib's paid AI consultation-notes assistant, used by doctors with patient consent, relies on language-processing infrastructure from Google, Microsoft, Anthropic, and Amazon, listed as subcontractors in Doctolib's data protection policy. Doctolib disputed the framing, stating the US firms act only as technical processors under contractual bans on using the data to train their own models, that data is encrypted and hosted exclusively in the EU (keys held by Atos/Evidian in France), and that separate explicit consent is required for Doctolib's own product-improvement uses. Follow-up fact-checks by TF1, BFMTV, and franceinfo confirmed the subcontractor list but found no technical evidence contradicting Doctolib's claims; commentators noted that under US law, encrypted data could theoretically be compelled from US-linked providers regardless of EU hosting. A related parallel controversy saw French health-tech firms (Doctolib, Alan, Lifen, Implicity, Resilience Care) publicly clash with the French government over mandatory 'sovereign cloud' hosting requirements.
company
Doctolib
French healthcare technology company operating Europe's largest medical appointment-booking and practice-management platform, serving roughly 500,000 practitioners and 90 million patients across France, Germany, Italy, and the Netherlands.