Sovereignty & GDPR

Your data in France, your obligations under control

Where is your data? Who can access it? What does your record of processing say? If those questions make you uneasy, we can help: sovereign solutions when they hold up, and hands-on GDPR support, without the jargon.

Request a free audit

Sovereign solutions, not slogans

Hosted in France

Our servers are in France, operated by our own team: this very website runs on them. Your data stays under French and European law, not under extraterritorial legislation.

Credible European alternatives

Email security with Vade, AI with Mistral (the French AI), European cloud and hosting: when a sovereign solution does the job just as well, we offer it first.

An honest trade-off

We will not sell you sovereignty out of ideology. When an American solution remains the best choice for your needs, we say so, and we secure how it is used. Sovereignty starts with knowing where you stand.

GDPR: we walk you through it

GDPR is not just a matter for lawyers: it is mostly about technology and organisation. We bring your IT up to standard, point by point.

Mapping: where your data lives, who accesses it, with which processors.
Minimisation and retention: we keep only what is useful, for as long as needed.
Processing security: encryption, backups, access rights management, logging.
Processors: providers and contracts that meet Article 28 of the GDPR.
Awareness: teams that can recognise personal data and handle it with the right reflexes.
Incident response: a data breach must be notified within 72 hours. Better to be ready beforehand.

We work alongside your DPO or legal counsel: they state the law, we put the technology and organisation behind it. Don't have one? We can point you in the right direction.

Questions fréquentes

What does sovereign actually mean?

Data hosted in France or the European Union, with providers subject to European law, with no access possible under foreign legislation. And in practice: being able to answer "where is my data?" in under a minute.

Should we move everything to French solutions?

No, and nobody serious does. We identify the sensitive data that deserves sovereign hosting, and the data for which a well-configured international solution remains the right call. It is a trade-off, not a dogma.

Are you a DPO?

No, and we do not claim to be. We work with your DPO or legal counsel, and we can point you to one if you have none. Our role: making sure your IT actually lives up to what your paperwork promises.

Is GDPR a project or a subscription?

Both. An initial upgrade (mapping, contracts, hardening), then upkeep over time: new tools, new processing, new obligations. It is typically part of our managed services contracts.

Could you say where your data is tonight?

Request a free audit