Physio · Osteo · Psych · Podiatrist · Midwife
Paramedics: your patient data no longer leaks, your reports become legally binding.
Every report submitted, validated, timestamped. On your server, in your country, under medical confidentiality. Compliant with art. L. 1110-4, 100% sovereign.
For your clients
- Encrypted private space
- Tracked follow-up session by session
- Timestamped, legally binding reports
For your practice
- Patient log & statistics
- Group practice delegation
- Multi-patient management
Tuesday 10:08 PM
Your Tuesday 10:08 PM. Fourth prescription follow-up.
“Did you receive my prescription?” Fourth time this week. Ms. Bernard is 75, just had a fall, and her physiotherapist isn’t sure if she can resume treatment.
Your prescriptions are sent via Doctolib message, your patients send their reports back through three different channels, and your shared Drive stores health data on servers outside the EU. Article L. 1110-4 is being overlooked.
What if every document arrived in an encrypted vault on YOUR server, timestamped, traceable, and legally admissible?
Before / After
You charge €65/session. You lose 4 hours/week chasing after prescriptions.
Four silent leaks occur when patient follow-up is not tracked. This is what they cost — and what Client Vault fixes, without clunky Doctolib or painful migrations.
Today · without a tracked vault
The daily routine that eats up your consultations
- 20 calls per week asking “Do you have the prescription?” — 4 non-billable hours per week.
- Prescriptions + medical reports outside the EU on Drive — risk under article L. 1110-4.
- No enforceable proof of reports or medical records being sent.
- Shared Drive for follow-ups at 65€ — poor practice image.
With Client Vault · tracked file
The practice that provides care, not administrative chores
- Patient engagement log — you see everything, you no longer need to call.
- AES-256 encrypted vault on YOUR server, in YOUR country.
- Millisecond-timestamped audit — for reports, prescriptions, and medical notes.
- URL cabinet-mer-soleil.fr, your branding, your practice.
Tracked follow-up
Your patient follow-ups, tracked from the initial assessment to the end of care.
Every follow-up becomes a visual journey. The patient knows where they stand. The timestamped audit automatically provides medical confidentiality proof. You provide care, the system tracks.
Day 0
Assessment & prescription
The patient opens their space. Initial assessment, prescription, additional exams, bank details — everything is in an encrypted vault on your server, timestamped to the millisecond.
Sessions
Marked follow-up
The patient follows their path. You validate progress, share exercises and advice. Every step is tracked.
Auto · Day+3
Automated follow-ups
Missing document for 3 days? Auto-email. 7 days? Notification in your dashboard. Never lose a patient again.
Final assessment
Discharge + archiving
Care completed: complete timestamped export (assessments, prescriptions, reports), medical confidentiality proof, archiving in the vault. Stored locally with you.
In practice: you set up your standard pathway once (post-op rehab, osteo follow-up, psychological support, nutritional monitoring). You reuse it for the next 100 patients.
Three pillars of the practice
For the client. For the practice. On your server.
16 features for your firm, organized into 3 complementary pillars. Click to explore each. Everything lives on your domain, under your brand, in an encrypted vault.
The client experience of a premium firm, delivered in 3 minutes.
The client connects, uploads, signs, and tracks. All within a private, encrypted space, under your firm’s brand.
01
Encrypted private space
4 tabs: Documents, Files, Links, Notes. AES-256 on your server.
02
Visual dashboard
The client sees completed phases, uploaded documents, and the next action. No more oversights.
03
Replays + calendar
Video meetings kept for 90 days; hearings and closings scheduled (Zoom, Whereby, Meet).
04
Private exchanges per step
Questions mapped to milestones; client portal for multi-party files.
05
Completed milestones (badges)
Visual representation: KYC validated, due diligence completed, document signed. For long-term files.
06
File-specific stats
“22/24 documents, 100% of deadlines met.” Demonstrates the firm’s rigor.
The management tool that lets lawyers advocate, not administrate.
Seven back-office features linked to a partner’s daily decision-making. Status of each file at a glance. Configurable collaborator access.
07
Journal per file
Client engagement score, deadlines met, pending documents. Identify the file that is slowing down from day 4.
08
Firm statistics
Decision-making tool: average turnaround time by file type, workload per partner, most frequently forgotten documents.
09
Automation
Notifications, hearing/appointment calendar, document follow-ups, webhook + REST API (17 events). Connect your firm’s practice management software.
10
Standard file builder
Transfer, divorce, succession, litigation, leases. Configured once, reused 100 times.
11
5 cumulative validation methods
Submission, third-party validation, quiz, appointment, attendance — a true chain of evidence, not just an « I have read » checkbox.
12
Staff delegation
Capability cv_manage_vault — every partner, associate, or intern has their own scope. Admin colors matched to your brand identity.
13
LMS import
LearnDash, Tutor LMS — link internal training modules to client/staff journeys. Qualiopi compliance.
Deontological pillar · the core of the choice
You are not renting a cloud. You are building the firm’s digital heritage.
Secib Cloud hosts your documents at Septeo. Jarvis at Wolters Kluwer. Dropbox Business outside the EU. With Client Vault, your documents stay with you. The encryption key is on your server, not ours. The publisher sees NOTHING. Open source code (GPL), verifiable.
14
The firm’s brand
The client sees cabinet-mer-soleil.fr/patients/m-bernard. Your branding, your identity. No “powered by”, no tracking pixels.
15
Ethical core
Full sovereignty
- Host of your choice: OVHcloud, Infomaniak, o2switch, private firm server.
- Country of your choice: France, EU, or on-premises firm server.
- Full and total ownership: no leasing, no SaaS.
- No visibility for the publisher: no telemetry, no remote access, no back-door. The key is with YOU.
- Article 66-5 natively respected — professional secrecy remains under your control.
16
Banking-grade security
AES-256-CBC, HMAC-SHA256, 5-minute single-use tokens, .htaccess hardening, rate limiting (20 dl/min), secure deletion. The level required by your code of ethics.
Why not use Doctolib Pro or Maiia?
Doctolib hosts your patients in the cloud. Client Vault hosts them on your own servers.
Standard practice management software
Doctolib Pro · Maiia · EasyKine · MonDocteur
- ≈ €129/month (Doctolib Pro)
- Hosted by the vendor
- URL doctolib.fr/cabinet — not yours
- No webhook or limited API
Client Vault · on your own site
The practice vault
- €299 / €599 — one-time payment, unlimited files
- Hosted on YOUR server (France/EU)
- URL cabinet-bertrand.fr/clients/m-bertrand
- Article 66-5 + webhook + REST API
Doctolib Pro at €129 × 12 months = €1,548/year. Client Vault Pro: €599 one-time payment, unlimited practitioners. ROI from the 5th month — then free for life.
112 practices equipped
Their premium patients have stopped comparing them to neighboring practices.
At first, I was skeptical — we were using Doctolib Pro. Then I stopped receiving “do you have the prescription?” messages. My patients told me: “finally, a professional practice.” Respecting medical confidentiality is rare.
The medical confidentiality argument convinced my board. Patient records should never transit through Drive. With Client Vault, they are encrypted on our OVH France server.
Therapy is intimate. I could no longer stand session notes being stored on a Drive where I have no control. Here, I manage everything. My patients thank me.
I migrated from Maiia (89 €/month × 12 = 1 068 €/year). Client Vault Pro: 599 € one-time payment. Year 2 = free. My patients see my site, not maiia.com.
What convinced me was the delegation feature: my secretary can see appointments without accessing medical records.
The timestamped audit log saved me. A patient disputed receiving their report. I pulled the export in 30 seconds: sent at 2:22 PM, read at 2:47 PM. The dispute ended right there.
Your next patient deserves
a vault that complies with your professional ethics.
20 minutes to install. 3 test patients. You watch the audit log timestamp entries and the journal fill up as your patients upload files. Then you decide.
Launch offer – ends September 15
Pay once. For life.
Up to 4× more sites.
All of Client Vault, team management included, installed on your side.
To get started
Pro Team · 3 sites
For the professional managing their first clients.
3sitesfor life
−50% at launch
999 €instead of 1 999 €
- Everything in SOLO + PRO included, plus:
- 3 sites
(instead of 1)at the URL of your choice - Unlimited clients for each vault
- Team mode for Admin
- Team mode for users
- Lifetime license · no renewal
- Updates FREE FOR LIFE (launch promo)
- Scripted journeys (1:1, Group, Collection, Funnel)
- REST API + unlimited webhooks
- Technical support
To deploy
Pro Team · 30 sites
To install Client Vault for your clients, white-labeled.
30sitesfor life
10 sites ×3 at launch
1 999 €one-time payment
- Everything in SOLO + PRO included, plus:
- 30 sites
(instead of 10)at the URL of your choice - Unlimited clients for each vault
- Team mode for Admin
- Team mode for users
- Lifetime license · no renewal
- Updates FREE FOR LIFE (launch promo)
- Scripted journeys (1:1, Group, Collection, Funnel)
- REST API + unlimited webhooks
- Technical support
★ Most chosen
Large scale
Pro Team · 100 sites
For resellers and firms that deploy without counting.
100sitesfor life
25 sites ×4 at launch
2 999 €instead of 9 999 €
- Everything in SOLO + PRO included, plus:
- 100 sites
(instead of 25)to deploy at the URL of your choice - The best sites-to-price ratio
- Priority support
- VIP group
After launch: 3 sites = 1 999 € · 10 sites = 2 499 € · 100 sites = 9 999 €. Buying now means more sites for less — forever.
Pro · 1 site — just for you, no teamAll of Client Vault, Journeys included, for life on your site.
1 199 € 599 € Choose →
One-time payment · Updates included · Your data stays with you, forever
Prices shown exclude VAT
Peer FAQ
Real questions from peers. Real answers.
Compliant with medical confidentiality L. 1110-4 and GDPR article 9 (sensitive data)?
Yes, and that is precisely the reason for the existence of the plugin for paramedical professionals. Medical reports, summaries, progress photos, and clinical notes are AES-256 server-side encrypted before being written to disk and are hosted on your own infrastructure. The encryption key resides on your server, not with the publisher. No telemetry, no remote access, no backdoors — full sovereignty is the core deontological argument for health data. A timestamped audit trail is exportable as a sealed PDF in the event of an insurance dispute or inquiry by the Council of the Order.
Do I not need an HDS host if I am using OVH or Infomaniak?
The HDS (Health Data Hosting) status is mandatory only for hosts that host your health data on behalf of a professional. When you install Client Vault on your own WordPress site, your host (OVH, Infomaniak, o2switch, etc.) does not host the data on your behalf in the sense of the HDS regulation — you, as the data controller, are the one hosting it on your infrastructure. This case is documented by the CNIL: a private practice that self-hosts on its own server is not required to choose an HDS-certified provider. If you want the extra security, OVH offers an HDS-certified solution — Client Vault runs identically there.
Will my elderly patients be able to use it?
The space opens via a simple secure link sent by SMS or email. No password to create, no app to install, mobile-first interface. Several paramedical practices report that patients over 70 years old upload their prescriptions and progress photos without assistance after 2-3 uses. Much simpler than a service like Doctolib, which requires creating a FranceConnect account.
Who can see the progress reports and photos on the Client Vault editor side?
Nobody. The reports, before/after photos, prescriptions, and clinical notes are AES-256 encrypted on your disk with a key stored on your own server (at the root of the site, with 600 permissions). The editor has no access, no telemetry, and no back-door. The source code is open (GPL) and verifiable. If you shut down your server, the editor cannot recover anything—which is exactly the point for health data.
Can I migrate from Doctolib Pro, Maiia, or a shared Drive?
Yes. A guided import script retrieves existing files (PDF prescriptions, reports, photos) into the patient vaults. The support team assists you with the first migrations at no extra cost as part of the Pro support plan. For Doctolib Pro: export from your back-office then import via CSV.
Where is patient data hosted?
On your own WordPress server, at the hosting provider of your choice, in the country of your choice. If your hosting provider is in France (OVH, o2switch, Ikoula, Infomaniak), your patient data remains in France — an almost systematic requirement for independent healthcare practitioners. No data is sent to Google, Amazon, or Microsoft. You retain control over the location and remain the GDPR controller.
How can I delegate tasks to my assistant, secretary, or associate?
The plugin declares the cv_manage_vault capability. You assign it via WordPress roles to your secretary, associate physiotherapist, or locum. Each has their own scope (by default: all patients; optional restrictions by patient tag, for example, “pediatrics” or “geriatrics”). Internal clinical notes remain reserved for the primary practitioner.
What if Client Vault disappears tomorrow?
Your patient data remains intact on your server. The source code is open (GPL). Your medical reports, exports, and audit logs are independent of the plugin and readable with any standard WordPress tool. This is the opposite of Doctolib Pro or Maiia: if the provider closes down tomorrow or changes its Terms of Service, your data is effectively leased, and you must repatriate it — making the 10-30 year retention period mandated by the Public Health Code a real headache.