- +32 9 242 87 30
- hello@docbyte.com
- Kortrijksesteenweg 1144 B 9051 Gent
The European Health Data Space changes how electronic health data must be governed, retained and made available across the EU. For hospitals, life sciences companies and other organisations that meet the EHDS definition of a health data holder, the archive becomes part of the regulated data infrastructure, not a passive storage tier. In healthcare, that archive layer often needs to coexist with EHR/EPD, HIS, PACS/VNA, DICOM, HL7/FHIR and XDS-style document sharing landscapes.
Qualified Trust Service Provider for Preservation and Electronic Archiving.
The European Health Data Space, established by Regulation (EU) 2025/327, entered into force on 26 March 2025. Its application is phased, with key obligations and infrastructures coming into effect gradually from 2027 onwards.
EHDS does not replace GDPR, MDR, IVDR, ICH GCP or national health legislation. It adds a health-data-specific layer around access, interoperability, exchange and secondary use. That changes the role of the archive.
Health data must remain accessible, intelligible and trustworthy across long retention periods, even when source systems change, vendors disappear or data models evolve. Records may need to be accessed by data subjects, exchanged across borders and reused in tightly governed contexts. That is difficult to do well if the archive only stores files without preserving structure, metadata, auditability and evidential integrity over time.
EHDS is not solved by the archive alone. But without a strong archive layer, it becomes much harder to solve well.
EHDS is a phased regulatory rollout, not a single deadline.
Organisations that prepare early can design the archive layer properly. Organisations that wait will be forced to retrofit under pressure.
EHDS is not an archiving regulation in the narrow sense. It does, however, make several archive capabilities materially more important.
Patient records, lab results, imaging studies and other regulated health records may need to remain reliable over long periods. Format obsolescence, cryptographic decay, system retirement and migration all create risk. Without active preservation, evidential quality erodes over time.
EHDS strengthens access, portability and control over electronic health data. Archives need to support retrieval by subject, dataset or record class, with strong logging and controlled disclosure.
Records that remain trapped in one application or proprietary structure become harder to exchange, reuse or defend. The archive should help preserve context and metadata around EHR/EPD exports, HL7/FHIR flows, DICOM-related content and XDS-style document sharing so records remain intelligible beyond the original operational system.
Health data holders may need to describe datasets, keep those descriptions current and support governed downstream use. That is difficult if metadata is incomplete, inconsistent or scattered across retired systems.
Archives should strengthen continuity, not inherit operational fragility. If a source platform is compromised, replaced or unavailable, the archive should still preserve trustworthy records and evidence.
Healthcare and life sciences records often have long and varied retention periods. Retention, legal holds, deletion review and auditability need to be enforceable and demonstrable.
Docbyte Vault is designed as a long-term preservation and evidential archiving platform. It does not make an organisation automatically EHDS-compliant on its own. It does, however, support several of the archive capabilities that EHDS makes more important.
Vault preserves records with fixity controls, evidential packaging and long-term preservation mechanisms intended to maintain demonstrability over time.
01
Vault Explorer supports controlled retrieval, evidential access and auditability for authorised users, inspectors and other legitimate stakeholders, without relying on the operational source system as the only place where records remain available.
02
Standards-aligned ingest and export, together with configurable metadata models, help reduce lock-in and support future exchange and reuse requirements.
03
Vault administration capabilities help structure metadata, retention rules, legal holds and reporting in a more governed way, reducing manual reconstruction later.
04
Vault can be positioned as a preservation layer separated from operational systems, helping organisations improve continuity, evidential control and recovery posture.
05
Vault supports retention policies by record type, legal holds, deletion workflows and lifecycle traceability.
06
As a Qualified Trust Service Provider for Qualified Electronic Archiving under eIDAS, Docbyte adds a strong trust and evidential layer. That does not equal EHDS compliance by itself, but it materially strengthens the legal and evidential quality of preserved records.
07
EHDS increases pressure on healthcare organisations to keep records accessible, trustworthy and exchange-ready even as operational systems change. The archive becomes part of continuity, governance and inspection readiness, not just storage.
Some pharmaceutical, biotech, CRO and research organisations may fall within the EHDS concept of a health data holder where they meet the legal definition. For those organisations, preservation quality, metadata discipline and evidential traceability become more important when data may later need to support regulated secondary use.
EHDS sits alongside GDPR, NIS2, MDR, IVDR and other sector-specific frameworks. The archive should not become the weak point between policy, evidence and operational reality.
AZ Alma Hospital uses Docbyte Vault to preserve patient and operational records across system changes. The case shows how application retirement, healthcare integration patterns and durable access to patient information can support continuity while reducing dependency on legacy systems.
EHDS entered into force on 26 March 2025, but application is phased. Key implementing and governance steps sit in 2027, the first major operational wave starts in 2029, and the next wave follows in 2031. Preparation should start well before the application dates.
Possibly. Under EHDS, a health data holder is not defined only by sector label. It depends on whether the organisation falls within the legal definition and has the relevant right, obligation or technical ability in relation to electronic health data. Hospitals will often fall within scope. Other organisations, including some pharmaceutical, biotech, research, digital health and care-sector actors, may also fall within scope where they meet the definition. Natural persons and micro-enterprises are in principle carved out from the duty to make data available unless national law extends that obligation.
Not in the narrow sense. EHDS does not prescribe one archive technology. It does, however, make long-term integrity, controlled access, interoperability, traceability and governed reuse materially more important. That raises the bar for what the archive needs to support.
EHDS adds sector-specific rules around electronic health data. It does not replace GDPR, cybersecurity obligations or sector-specific quality and validation expectations. Organisations still need to manage those frameworks together.
No. Qualified Electronic Archiving under eIDAS is not the same thing as EHDS compliance. It is, however, a strong trust and evidence layer that can materially strengthen the legal and evidential quality of preserved records within a broader EHDS readiness programme.
EHDS will not be met by storage alone. It increases the importance of an archive that preserves health records with long-term integrity, supports controlled retrieval, preserves healthcare metadata and helps organisations produce evidence on demand.
GxP Archive Readiness Guide
The guide helps teams review retrieval, context, access history and retained evidence before regulated records move out of active systems.
Download the self-assessment guide
English 
French 
Dutch 
