Built-in regulatory compliance

GDPR Mapping, DPIA, external DPO
NIS2 Critical operators
ANSSI Cybersecurity
RGAA Digital accessibility
REEN Responsible digital

An approach tailored to your organisation

Municipalities & intercommunalities

Sensitive citizen data, small or non-existent IT teams, GDPR obligations, open-source software circular (2021), REEN law for towns above 50,000 inhabitants. ekuITy manages your IT end-to-end: strategy, compliance, sovereignty.

GDPROpen source circularREENRGAA

Schools & educational institutions

Children’s data subject to enhanced protection. Several EU member states have banned Big Tech tools without impact assessment. ekuITy deploys sovereign environments connected to regional digital learning platforms, with refurbished hardware.

GDPR minorsEnhanced protectionENT interop.

Public administration

Ministries, devolved State services and State operators: the “cloud first” doctrine (cloud au centre), the general security framework (RGS), NIS2 for essential entities, and priority to free software from the interministerial base. ekuITy fits this framework: SILL-listed solutions, sovereign hosting, ANSSI-aligned cybersecurity.

Cloud au centreRGSNIS2SILL

What ekuITy delivers for public organisations

Integrated regulatory compliance

  • GDPR: data mapping, DPIA, processing register, external DPO
  • NIS2: maturity audit, risk plan, ANSSI incident reporting
  • RGAA: accessibility audit and remediation support
  • REEN: digital carbon footprint measurement and reporting

Sovereignty & open source by default

  • No service subject to the US Cloud Act
  • DINUM/SILL-listed solutions (interministerial catalogue)
  • Hosting in France or Europe — no third-country data transfer

ANSSI-aligned cybersecurity

  • Audit using ANSSI guides and the MonAideCyber programme
  • Awareness training for staff and management
  • Least-privilege principle and network segmentation
  • BCP / DRP: business continuity and disaster recovery
  • Critical patches applied within 72 hours

Team training

  • Cybersecurity awareness for all staff
  • Onboarding for deployed tools (koopération, konnaissance...)
  • Training for digital referents and system administrators
  • DPO / GDPR workshops for data correspondents

Example use cases

Organization
Need
ekuITy solution
Town of 8,000 inhabitants
Outsourced CIO, sovereign messaging
koopération + outsourced CIO service
Intercommunality
GDPR + REEN compliance, knowledge base
konnaissance + GDPR audit + REEN assessment
Public secondary school
Pupil data protection, refurbished equipment
kollaborateur + sovereign koopération
Devolved State service
NIS2, RGS, BCP/DRP, staff training
ANSSI audit + BCP/DRP + training
State operator
Sovereign document management
konnaissance + koopération

Access via public procurement frameworks

ekuITy simplifies access to its services for public sector organisations by integrating with existing public procurement frameworks — no need to run a full tender process on your side.

UGAP

France’s general government procurement centre. Any administration, local authority, or school can purchase ekuITy IT services without running its own public procurement procedure.

Listing in progress
CANUT

Specialised digital and telecom procurement centre for local authorities, social housing organisations, and public institutions. Software, cloud, and digital services via dedicated framework agreements.

Engagement underway

What you can demand from us

Independence

No exclusive resale agreements with proprietary publishers. Our recommendations are driven by your interest alone — not our margins.

Transparency

Per-service contracts, no hidden costs, no automatic renewals. You remain in control at all times.

Service continuity

SLAs adapted to the continuity requirements of administrations and municipalities. Critical systems don’t stop — neither does our responsiveness.

Full traceability

Complete documentation, transferable to your successor or another provider. You never depend on ekuITy to understand your own IT.

Are you a public sector organisation?

Let’s discuss your regulatory challenges and the best way to access our services via your existing procurement frameworks.

Frequently asked questions

Are local authorities subject to NIS2?
Yes. The NIS2 directive significantly widens the scope of entities with cybersecurity obligations. Municipalities above 30,000 inhabitants, regions, and strategically important intercommunalities fall under NIS2 as important or essential entities. They must adopt cyber risk governance, report incidents to ANSSI, and implement auditable security measures.
How can a public body access ekuITy’s services via UGAP or CANUT?
ekuITy is currently being listed on UGAP (general procurement centre) and has initiated the process with CANUT (digital and telecom). Once listed, local authorities and public institutions can order ekuITy services directly without running their own competitive tender, under framework agreements negotiated by these central purchasing bodies. Contact us to find out the current status and available access routes.