Wimi certified for the security of your data
Wimi is certified ISO/IEC 27001:2022 by LSTI-COFRAC. Our information security management system meets the most stringent requirements to protect your sensitive data in SaaS mode.
Why ISO/IEC 27001:2022 is essential
Certification requires the systematic identification and evaluation of security risks. Your data is protected by a structured threat management framework that is proven and independently audited.
The standard requires regular monitoring and annual audits. Your security system is constantly adapting to evolving threats and guarantees long-lasting protection.
What the ISO/IEC 27001:2022 certification guarantees
The standard requires organizations to systematically review their information security risks taking into account threats, vulnerabilities, and impacts. A documented risk assessment process covers the entire certified perimeter and is reviewed annually.
ISO/IEC 27001:2022 defines 93 security controls in its Annex A, divided into 4 areas: organizational, human, physical and technological. These controls cover access control, cryptography, physical security, physical security, incident management, business continuity, and many other critical aspects of information security.
Certification requires comprehensive documentation of security policy, operational procedures, risk treatment measures, and audit results. This traceability guarantees transparency and the ability to demonstrate compliance on an ongoing basis.
The ISO/IEC 27001 certification process involves a three-stage audit conducted by qualified independent auditors. The Stage 1 audit verifies the existence and completeness of key documentation. The Stage 2 audit formally tests the conformity of the ISMS with the requirements of the standard. Annual maintenance audits confirm that the organization remains compliant.
The standard imposes a management process that ensures that security controls continue to meet the security needs of the organization on an ongoing basis. The non-conformities detected must be the subject of documented corrective actions.
ISO/IEC 27001 is recognized worldwide as the reference in information security management. Certification by an accredited body (such as LSTI-COFRAC) is functionally equivalent regardless of the national variant of the standard.
“Wimi is a solution perfectly suited to collaboration in project mode. Its ease of handling and the flexibility offered according to uses convinced us. Covid-19 and the periods of teleworking have only amplified the need for such a solution to maintain exchanges and continue our projects.”Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore and dolore magna aliqua. Ut enim ad minimim veniam, qui nostrud exercising ullamco laboris nisi ut aliquip ex ea commodo consequat. Duvet high grain color wine In voluptate velit esse illum dolore eu fugiat nulla pariatur.
“Wimi is a solution perfectly suited to collaboration in project mode. Its ease of handling and the flexibility offered according to uses convinced us. Covid-19 and the periods of teleworking have only amplified the need for such a solution to maintain exchanges and continue our projects.”
"Wimi nous permet de centraliser notre processus de création et de planification de contenus. La plateforme nous apporte une vision claire et centralisée de notre production. Je le recommande sans hésiter aux équipes qui veulent gagner en agilité et optimiser leur processus de création de contenus."
"Wimi nous permet de faciliter la communication entre le staff et les joueurs, de fluidifier le partage des données et d’accélérer la planification de nos évènements sportifs. Le budget est aussi très attractif au regard du périmètre fonctionnel, riche et ergonome couvert par la solution."
"Wimi est un outil sécurisé et sécurisant qui répond clairement aux besoins d’une profession réglementée par le secret professionnel. Travailler sur nos dossiers depuis la plateforme est devenu une évidence pour nous. Nous sommes bluffés par la facilité avec laquelle nos clients et partenaires adoptent la solution."
Cybersecurity and compliance resources
Your questions about ISO/IEC 27001:2022
What is the Numérique France Garanti label?
Numérique France Garanti (NFG) certifies that the key activities of a digital service are controlled in France and that most of its value is created there. The certification is run by the Origine France Garantie association and audited by Bureau Veritas.
It rests on three principles:
- Sovereignty: the key activities and the life cycle of the service are controlled in France.
- Transparency: buyers know what a service "made in France" actually covers.
- Autonomy: the vendor limits its dependence on external infrastructure and tools.
Who issues the certification and how does the audit work?
The certification is issued by the Origine France Garantie association, based on an audit carried out by Bureau Veritas, an independent third party. The process has four steps:
1. Application
The vendor submits its application. Origine France Garantie checks the basic conditions: key activities, governance and data located in France.
2. Audit
Bureau Veritas audits the vendor against the current standard: development, governance, data and share of value created in France.
3. Decision
The certification is granted or refused. If granted, the certificate of conformity is valid for three years.
4. Follow-up audit
An annual audit checks that the vendor remains compliant throughout the cycle.
Which Wimi offers are certified Numérique France Garanti?
Two offers are certified:
- Wimi Trust, our shared offer.
- Wimi SNC, our offer qualified SecNumCloud 3.2 SaaS by ANSSI, the French national cybersecurity agency.
Bureau Veritas audited this scope: Wimi Trust and Wimi SNC.
Which criteria does the Numérique France Garanti standard check?
The standard is built around two requirements:
Sovereignty and location of key activities
French governance, key activities in France, data protection, proven service continuity and resilience.
Mostly French added value
More than half of the value linked to design, development, operations and maintenance must be created in France.
For Wimi Trust and Wimi SNC, these requirements translate into four guarantees, measured on the costs that make up the offers:
- More than 50% of payroll in France
- More than 80% of suppliers and subcontractors in France
- No exposure to extraterritorial law, with the same criteria as SecNumCloud
- No critical dependence on any non-European provider
What is the difference between Numérique France Garanti and SecNumCloud?
The two complement each other but do not measure the same thing.
SecNumCloud is a security qualification issued by ANSSI. It checks more than 360 technical, operational and legal requirements, including protection against extraterritorial laws.
Numérique France Garanti checks the French origin of the solution: where the teams work, where suppliers come from, who governs the company and what share of the value is created in France.
In short: SecNumCloud tells you whether your data is protected. NFG tells you whether the solution is French, backed by an audit. Wimi SNC has both.
What is the difference between Numérique France Garanti and EU Score?
EU Score is an independent European framework that rates how rooted a vendor is in Europe, based on public criteria: headquarters, employees, capital, subcontracting and servers.
NFG is a certification issued after an audit by a third-party body, focused on French origin.
The two read together: EU Score places Wimi in the European ecosystem, NFG certifies its roots in France.
Why did Wimi take part in building the Numérique France Garanti standard?
Wimi is one of the pilot companies that drew up the standard with Origine France Garantie. We pushed for verifiable criteria, so that "French" describes an audited fact rather than a sales argument.
This continues our existing commitments: SecNumCloud 3.2 SaaS qualification, ISO/IEC 27001:2022 certification, NIS2 and HDS compliance.
Is the Numérique France Garanti label required in public procurement?
No, the label is not a regulatory requirement. It does provide audited proof of a solution's French origin, which helps in several cases:
- You need to justify the choice of a sovereign solution to your management or elected officials
- Your purchasing policy values local economic impact
- You want to limit your exposure to laws and decisions by suppliers outside Europe
- You are comparing several solutions that all claim to be "French"
Ready to protect your data?
Wimi offers a collaborative suite certified by LSTI-COFRAC, in accordance with international information security standards. Learn how we protect your sensitive data.