Trust, security & transparency — all in one place.
Welcome to our Trust Center. Here you will find all of our security commitments (sovereign data centres, certifications, defence in depth) as well as our legal documents, available to download in one click (Terms of Sale and Use, DPA).
99,982%
Availability
Guaranteed SLA
3
Data centres
Real-time replication
> 300 km
Between data centres
Geographic DRP
1h
Backups
12-month retention
Your data stays in France, on a sovereign cloud.
Our platform runs on the Visiativ cloud, hosted in Free Pro data centres located exclusively in France. This infrastructure is ISO 27001 and HDS (Health Data Hosting) certified, with 2N network and power redundancy and an availability commitment of 99.982%.
The 3 data centres are more than 300 km apart, ensuring a geographically robust DRP/BCP. No data ever leaves French territory — whether for storage, backups or logs.
Protection designed across every dimension
Confidentiality, Integrity, Availability, Security: each dimension is covered by concrete, auditable measures.
Confidentiality
End-to-end encryption, at rest and in transit. MFA, access segregation and fine-grained permission management.
Integrity
Protection against any unauthorised modification. Immutable logging, with backups verified daily.
Availability
Replicated across 3 data centres in France, with automatic failover within seconds in the event of an incident.
Security
Regular penetration testing, a dedicated cybersecurity team, a DevSecOps organisation and continuous monitoring.
5 layers of security, built to withstand attacks
No single measure protects everything. We stack security layers so that each one compensates for any weaknesses in another.
Layer 01
Physical security
The best certifications for our infrastructure
Our hosting infrastructure (Visiativ · Free Pro) is certified against the most demanding standards in cybersecurity and data protection.
ISO 27001
Security management system
PrimaryHDS
Health Data Hosting
GDPR
European data protection regulation
APSAD R13
Fire detection
VESDA
Very high sensitivity detection
SSIAP
Fire safety agents
The certifications above relate to our hosting infrastructure and technical partners. Data Comply One is committed to the continuous improvement of its ISMS.
A solution that is itself compliant with European requirements
Beyond the modules we provide to help you manage your own compliance, Data Comply One, as a SaaS vendor, is itself aligned with the main European regulations governing data and AI.
EU Regulation 2016/679
GDPR
Data Comply One is fully GDPR-compliant as the processor of your data: data minimisation, documented legal bases, standard DPA provided, designated DPO, guaranteed data subject rights and complete access traceability.
See details GDPREU Regulation 2024/1689
AI Act
The AI features built into the platform (assistants, classifications, summaries) comply with the AI Act: risk-level categorisation, transparency on the models used, human oversight and technical documentation.
See details AI ActEU Regulation 2023/2854
Data Act
Data Comply One adheres to the principles of the Data Act: portability and full return of your data at any time (open formats), no vendor lock-in, access traceability and fair data-sharing terms.
See details Data ActThe platform evolves continuously in step with regulatory developments (NIS 2, DORA, CRA, ISO 27001/42001). Our monitoring and legal teams ensure you always stay up to date.
Clear commitments, in black and white
Because trust cannot be decreed, it has to be contractually guaranteed. Here are our concrete commitments to you.
100% hosted in France
No data ever leaves the country. Visiativ sovereign cloud · exclusively French Free Pro datacentres.
Your data, your property
You remain the sole owner of your data. We never use your content for any other purpose.
Full reversibility
Export in open formats (CSV, Excel) at any time. Complete and secure return of your data at the end of the contract.
Transparency
Designated DPO · security reports on request · public status page.
Prompt notification
In the event of a security incident: notification within 24 hours, in line with the GDPR and our contractual commitments.
Robust contracts
DPA compliant with the French supervisory authority (CNIL) requirements, GDPR processor clauses, and a detailed security annex provided for validation by your legal teams.
Our legal documents, freely accessible
Download our general terms of sale and use and our data processing agreement (DPA) in one click — always up to date, for your legal teams and procurement processes.
General Terms of Sale and Use
The complete contractual framework for our Data Comply One services (platform, modules, subscriptions, SLA).
Data Processing Agreement (DPA)
The GDPR Art. 28 contractual annex setting out Data Comply One's obligations as the processor of your personal data.
A question about our security?
Our CISO and technical teams are available to answer your security questionnaires, arrange a technical presentation or send you our detailed security annex.
Reply within 24 working hours