SecNumCloud: the highest level of French security
The highest level of French cloud security, issued by ANSSI. Wimi is committed to this rigorous process to guarantee its customers maximum protection of their data and total immunity from extraterritorial laws. Expected to be obtained Q1 2026.
What is SecNumCloud?
The most demanding cloud security qualification in France, issued by ANSSI (National Agency for Information System Security).
SecNumCloud attests to a maximum level of data protection on a technical, operational and legal level. It guarantees total immunity from extraterritorial laws (Cloud Act, Patriot Act) and imposes annual security audits.
Only 8 offers are qualified on the entire French market. Including Wimi.
3 reasons for our SecnumCloud commitment
SecNumCloud officially certifies our immunity from extraterritorial laws. Your data remains under exclusive French jurisdiction, protected by the Cloud Act and the Patriot Act. 100% French hosting, French teams, total control.
The most demanding security standards on the market: sovereign datacenters, end-to-end encryption, regular intrusion tests, complete data isolation. The same protection that is used by ministries and operators of vital importance.
SecNumCloud automatically meets NIS2, DORA, State cloud doctrine, and OIV/OSE requirements. You gain confidence in your compliance audits and drastically simplify your regulatory obligations.
What SecNumCloud will guarantee for your data
Your data is hosted in datacenters subject to annual physical audits carried out by ANSSI. 182 control points are checked regularly to maintain continuous certification and guarantee the highest level of security.
Your data never leaves French territory. Hosted in 3 datacenters located in mainland France, they remain under exclusive French jurisdiction without any replication abroad.
All of your data is encrypted with AES-256, both at rest and in transit. Encryption keys are owned exclusively by you and stored in certified hardware security modules (HSMs).
A redundant N+1 infrastructure ensures 99.98% availability. Our recovery and business continuity plans are tested quarterly to ensure uninterrupted service.
Your environments are strictly compartmentalized with advanced network segmentation. No sharing between customers: your data remains isolated in dedicated watertight environments.
SecNumCloud relies on ISO 27001, 27017 and 27018 certifications, with native GDPR compliance by design. All of these certifications are maintained and audited annually.
“Wimi is a solution perfectly suited to collaboration in project mode. Its ease of handling and the flexibility offered according to uses convinced us. Covid-19 and the periods of teleworking have only amplified the need for such a solution to maintain exchanges and continue our projects.”Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore and dolore magna aliqua. Ut enim ad minimim veniam, qui nostrud exercising ullamco laboris nisi ut aliquip ex ea commodo consequat. Duvet high grain color wine In voluptate velit esse illum dolore eu fugiat nulla pariatur.
“Wimi is a solution perfectly suited to collaboration in project mode. Its ease of handling and the flexibility offered according to uses convinced us. Covid-19 and the periods of teleworking have only amplified the need for such a solution to maintain exchanges and continue our projects.”
"Wimi nous permet de centraliser notre processus de création et de planification de contenus. La plateforme nous apporte une vision claire et centralisée de notre production. Je le recommande sans hésiter aux équipes qui veulent gagner en agilité et optimiser leur processus de création de contenus."
"Wimi nous permet de faciliter la communication entre le staff et les joueurs, de fluidifier le partage des données et d’accélérer la planification de nos évènements sportifs. Le budget est aussi très attractif au regard du périmètre fonctionnel, riche et ergonome couvert par la solution."
"Wimi est un outil sécurisé et sécurisant qui répond clairement aux besoins d’une profession réglementée par le secret professionnel. Travailler sur nos dossiers depuis la plateforme est devenu une évidence pour nous. Nous sommes bluffés par la facilité avec laquelle nos clients et partenaires adoptent la solution."
Ressources cybersécurité et conformité
Vos questions sur SecNumCloud
How do I know if my organization needs SecNumCloud?
You are legally concerned if:
- Vital Importance Operator (OIV) or Essential Services Operator (OSE)
- Subject to the NIS2 directive in a critical sector
- Work with defense, weapons, or classified data
- Public administration handling sensitive data
SecNumCloud is highly recommended if:
- You handle strategic data (R&D, patents, industrial secrets)
- Strict confidentiality obligations (health, justice, finance)
- You want to protect yourself from extraterritorial laws
- The sovereignty of your data is critical
In case of doubt, our experts can assist you in assessing your needs.
What is the difference between SecNumCloud and other certifications like ISO 27001?
ISO 27001 is a generic international standard for information security management. SecNumCloud goes much further:
- Cloud-specific repository with 19 chapters of precise technical requirements
- Legal protection against extraterritorial laws (mandatory European capital)
- Total sovereignty: infrastructure, administration and data in France/EU
- Mandatory annual audits by qualified PASSI service providers
- Full traceability and logging for a minimum of 6 months
In summary: ISO 27001 is a solid base, SecNumCloud is the top of the cloud requirement in Europe.
Why is SecNumCloud important for my organization?
If your organization handles sensitive or strategic data, SecNumCloud offers you several essential guarantees:
Maximum technical protection: The 360+ SecNumCloud requirements cover all aspects of cybersecurity, from encryption to intrusion detection to incident management.
Legal immunity: Your data is protected against American extraterritorial laws (Cloud Act, Patriot Act). No foreign government can access it.
Compliance made easy: SecnumCloud greatly facilitates your compliance with other regulations such as NIS2, the RGPD, or OIV/OSE obligations.Strengthened trust: For your customers, partners and supervisory authorities, the SecnumCloud label is a guarantee of seriousness and reliability.
Find out how Wimi helps you with NIS2
Does my organization have to use SecNumCloud?
C'est obligatoire pour :
- Opérateurs d'Importance Vitale (OIV) et de Services Essentiels (OSE)
- Administrations manipulant des données sensibles
- Organisations soumises à NIS2 dans des secteurs critiques
- Entreprises du secteur défense et armement
C'est fortement recommandé pour :
- Données stratégiques (R&D, brevets, secrets industriels)
- Obligations de confidentialité strictes (santé, justice, finance)
- Toute structure souhaitant se protéger des lois extraterritoriales
Même sans obligation légale, SecNumCloud est aujourd'hui la meilleure protection disponible pour vos données critiques.
Is Wimi already SecNumCloud qualified?
Wimi is in the process of qualifying SecNumCloud 3.2 with finalization scheduled for Q1 2026. Our infrastructure already meets the requirements of the standard:
- Datacenters in France, in compliance with SecNumCloud location requirements
- End-to-end encryption and keys under customer control
- Multi-factor authentication mandatory for sensitive accesses
- Extensive logging and real-time incident detection
- Regular security audits by qualified service providers
Even before final certification, Wimi already offers a level of security in accordance with SecNumCloud standards.
How much does a SecNumCloud solution cost?
SecNumCloud solutions are slightly more expensive than American public clouds due to the level of technical requirements and ANSSI audits. However:
Actual cost : Public clouds charge for security, compliance, and support as separate options
Legal protection: Full immunity against extraterritorial laws = invaluable value
Compliance made easy: Save time and money on NIS2, RGPD, OIV/OSE
Risks avoided: The cost of a data breach far exceeds the price difference
At Wimi, we offer transparent and scalable pricing, adapted to your organization.Discover our rates
What happens in the event of a French judicial requisition?
The SecNumCloud framework protects against extraterritorial laws (American Cloud Act), but remains subject to French and European law. In the event of a legitimate judicial requisition from a French authority, Wimi may be required to cooperate within the legal framework.
However, unlike American clouds, no foreign authority can require access to your data without going through international legal assistance channels.
Does SecnumCloud guarantee 100% availability?
No SecnumCloud imposes strict business continuity (PCA/PRA) and resilience requirements, but does not guarantee absolute availability.
Wimi is committed to 99.5% availability, with automatic backup mechanisms, datacenter redundancy and business recovery plans documented in accordance with Chapter 17 of the SecNumCloud repository.
Can I easily migrate to Wimi from my current cloud?
Yes. Wimi offers comprehensive support to secure your migration:
- Audit your existing infrastructure
- Customized migration plan with zero downtime
- Data recovery with end-to-end encryption
- Training your teams in SecNumCloud best practices
- Dedicated support during and after migration
Our experts support you every step of the way to ensure a risk-free transition to a sovereign cloud.
Prêt à reprendre le contrôle de vos données ?
Essayez Wimi gratuitement ou échangez avec nos experts pour découvrir comment SecNumCloud renforcera la protection de vos informations sensibles.