Staffing DevOps Lille EuraTechnologies — multi-cloud

Résidence des données

There is no general data-localisation mandate beyond GDPR/EEA transfer rules, but two sector rules bite hard in cloud procurement: sensitive data of French public administrations falls under the 'cloud au centre' doctrine and the law of 21 May 2024 (SREN), which push it toward providers holding ANSSI's SecNumCloud qualification; and personal health data must be hosted by an HDS-certified host under article L.1111-8 of the Code de la santé publique.

Ce qui structure l'achat cloud ici

Sovereignty framing dominates technical procurement: public-sector and many regulated buyers screen cloud providers against ANSSI's SecNumCloud qualification, which as of 2026 is held by a small set of mostly French providers, while US hyperscalers pursue it through joint-venture constructs rather than their own entities — so a shortlist can be narrowed by qualification status before any technical evaluation. Public tenders run as formal appels d'offres with a written cahier des charges, and French is the contractual and documentation language even where engineering teams work in English day to day. As of July 2026 the NIS2 transposition (projet de loi résilience) had cleared the Senate and Assembly committee but was not yet promulgated; the European Commission issued a reasoned opinion against France on 7 May 2025 for late transposition. Buyers sequence around ANSSI guidance and existing LPM/OIV obligations.

Régulateurs sectoriels