Resource

SecNumCloud: The ANSSI Qualification for a Trusted Cloud

SecNumCloud is the French ANSSI security visa guaranteeing a cloud immune to extra-European laws. Definition, requirements and the path to qualification.

SecNumCloud: The ANSSI Qualification for a Trusted Cloud

SecNumCloud is the qualification framework issued by ANSSI (the French national cybersecurity agency). It certifies that a cloud service meets the highest French security bar — and, crucially, that it is immune to extra-European laws such as the US CLOUD Act.

What is SecNumCloud?

It is an official security visa. A SecNumCloud-qualified provider (current framework 3.2) has demonstrated, through audit, hundreds of technical and organisational requirements: European hosting and operation, vetted staff, encryption, reversibility, and an ownership structure that prevents foreign interference.

Why the qualification matters

SecNumCloud is the reference for the French state's "Cloud at the centre" doctrine and a structuring criterion for the public sector and regulated operators. It is also the foundation of the trusted cloud label.

How to obtain SecNumCloud qualification

Gap analysis against the 3.2 framework, technical and organisational upgrades, then an audit by an accredited assessor before ANSSI grants the qualification — typically 8 to 18 months. For a customer, the essential thing is simpler: confirm the chosen offer is actually qualified on the relevant scope.

Take the 2-minute assessment — gauge your gap to SecNumCloud and the next steps. Request a consultation

Frequently asked questions

What is SecNumCloud?

An ANSSI qualification certifying a cloud meets the highest French security level and is immune to extra-European laws.

How do you obtain SecNumCloud qualification?

Through gap analysis, upgrades and an accredited audit — generally 8 to 18 months.