SecNumCloud

SecNumCloud is a security label issued by the French National Cybersecurity Agency (ANSSI). This certification guarantees a high level of security and data protection for cloud services.

What is SecNumCloud?

SecNumCloud is ANSSI's reference framework for qualifying cloud computing service providers. It defines the security requirements that a cloud computing offering must meet to be qualified.

Certification objectives

• Digital sovereignty: Ensure data remains under French/European jurisdiction
• Enhanced security: Protection against cyber threats and unauthorized access
• Regulatory compliance: Meet the requirements of sensitive administrations and businesses
• Transparency: Visibility on data locations and subcontractors

Main requirements

1. Data location: Hosting in France or the EU
2. Authorized personnel: Administrators of French or European nationality
3. Traceability: Comprehensive logging of access and operations
4. Encryption: Protection of data at rest and in transit
5. Reversibility: Guarantee of data recovery
6. GDPR compliance: Compliance with European data protection regulation

Qualification levels

SecNumCloud offers different levels depending on data sensitivity:

• Standard: For sensitive unclassified data
• Enhanced: For data requiring enhanced protection

Official resources

• ANSSI - SecNumCloud
• SecNumCloud products & services’ catalog