ANSSI SecNumCloud: the highest level of security for sensitive and critical data
As the national authority for security and information systems defence, the National Agency for Information Systems Security (ANSSI) recommends using solutions with its security visa. The agency also created the SecNumCloud framework, in order to promote, enrich and improve cloud provider offerings to public authorities, Operators of Vital Importance (OIV) and Operators of Essential Services (OSE). This way, these organisations can outsource their data hosting, applications and information systems to trusted partners.
OVHcloud’s SecNumCloud services are hosted in two of our new datacentres. Built specifically in France, Roubaix and Strasbourg, they address the security challenges associated with storing sensitive and critical data. These datacentres have enhanced security measures. The services hosted there are operated, maintained and monitored exclusively by personnel based in Europe. Furthermore, the SecNumCloud solutions are a guarantee to customers that none of their data will be accessible, transferred or processed outside the European Union.
In today’s interconnected global environment, digital sovereignty is a major political issue. In 2017, ANSSI published the SecNumCloud framework and a qualification procedure for “cloud computing service providers”, modelled on those existing for trusted service providers (electronic certification, incident detection, timestamping, security audit, etc.). Its aim is to guide administrative authorities, operators of vital importance (OVIs), and all European and French economic operators towards trusted cloud providers.
You can request a free callback from an OVHcloud advisor.
SecNumCloud framework origins
The SecNumCloud framework, which resulted from the Cloud plan (one of the 34 plans by the 2014 New Industrial France programme) and a dialogue with manufacturers, is aligned with the ISO 27001 standard. It specifies the security measures to be implemented in order to deliver a highly secure cloud service for critical processing. The requirement framework was updated in June 2018. In the new release, the Essential and Advanced levels have been removed to leave only one qualification level. In addition, privacy requirements have been added to take into account the European General Data Protection Regulation (GDPR).
About ANSSI Security Visas
Security Visas issued by the National Cybersecurity Agency (ANSSI) allow reliable security solutions to be identified following an evaluation carried out by approved laboratories in accordance with a rigorous and proven methodology. This assessment involves an in-depth analysis of the organisation and its procedures, architecture and technical configurations in order to verify the compliance of these solutions with the relevant framework of requirements. A Security Visa is issued with a certificate or qualification, depending on the context and need. Security Visas are a guarantee of security for users in a framework of trust built by the ANSSI (source: ANSSI)
Additional services
Certifications and reports
Our customers can access our certification and report documents upon request. They may also request documents relating to our certifications subject to certain conditions.
On-site audits
We only authorise audits carried out by third parties for the purpose of certifying all relevant parties. Contact our sales department to access this type of service