Doctolib—Doctolib's AI note-taking feature routes patient consultation data through US tech subcontractors, raising data-sovereignty concerns
An investigation by Le Canard Enchaîné (June 2, 2026) revealed that Doctolib's paid AI consultation-notes assistant, used by doctors with patient consent, relies on language-processing infrastructure from Google, Microsoft, Anthropic, and Amazon, listed as subcontractors in Doctolib's data protection policy. Doctolib disputed the framing, stating the US firms act only as technical processors under contractual bans on using the data to train their own models, that data is encrypted and hosted exclusively in the EU (keys held by Atos/Evidian in France), and that separate explicit consent is required for Doctolib's own product-improvement uses. Follow-up fact-checks by TF1, BFMTV, and franceinfo confirmed the subcontractor list but found no technical evidence contradicting Doctolib's claims; commentators noted that under US law, encrypted data could theoretically be compelled from US-linked providers regardless of EU hosting. A related parallel controversy saw French health-tech firms (Doctolib, Alan, Lifen, Implicity, Resilience Care) publicly clash with the French government over mandatory 'sovereign cloud' hosting requirements.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Corporate Transparency | +toward | contextual | +0.20 |
| Data Security | -against | secondary | -0.50 |
| User Privacy | -against | primary | -1.00 |
| Overall incident score = | -0.237 | ||
Score = avg(topic contributions) × significance (medium ×1) × confidence (0.55)
Evidence (2 signals)
TF1 fact-check confirms Doctolib's US subcontractor list but finds no proof of data misuse; Doctolib cites contractual bans and EU-only encrypted hosting
TF1 Info's fact-checking unit confirmed Doctolib's privacy policy names Anthropic, Amazon, Microsoft, and Google as subcontractors for its AI note-taking feature, but found no technical evidence contradicting Doctolib's claim that these firms are barred from training on the data and that data is encrypted and hosted only in the EU.
Le Canard Enchaîné investigation: Doctolib's AI note-taking tool uses US tech giants as subcontractors
Investigative weekly Le Canard Enchaîné reported that Doctolib's AI consultation-notes assistant lists Google, Microsoft, Anthropic, and Amazon as subcontractors in its data protection policy, warning that US courts could theoretically compel data transmission despite EU hosting.