Trust center

Compliance as a product surface.
Not a slide.

LeCloud runs on Outscale SecNumCloud infrastructure. Every action, plan and approval is signed, archived and exportable as audit evidence.

AFNOR ISO 27001
Certified
HDS
Certified
Residency
Available in FR · EU regions
Infrastructure
Outscale SecNumCloud

Wording note: Rectangle is ISO 27001 and HDS certified. LeCloud runs on Outscale SecNumCloud infrastructure. Rectangle does not claim SecNumCloud certification of its own entity.

trust dashboardExample dashboard
Certifications
AFNOR ISO 27001
Certified
HDS
Certified
Outscale SecNumCloud
Infrastructure
NF Z42-013
LTA aligned
Residency
fr-par-1primary · SecNumCloud
fr-par-2replica · SecNumCloud
eu-westavailable · EU zone
Last reconcile
12s
drift: 0 · 14 apps healthy
Evidence captured
2,418
events · last 30d · exportable
Sub-processors
Outscale (SecNumCloud IaaS)Selected EU trust providersFull list on request
evidence timeline · deploy.peppol-apSample evidence timeline
  1. Prompt receivedp:0x71…ce
    ops-lead@rectangle · 14:02:11
  2. Plan signed0x9c41…ab2e
    ai-mode / verified blueprint · 14:02:18
  3. Human approvalsig:0x4b…9d
    compliance.peppol · 14:05:44
  4. Deployedrev:1.4.0
    argocd · fr-par-secnumcloud · 14:09:56
  5. Archivedlta:0xaa…12
    LTA · NF Z42-013 · 10y · 14:10:02

Verified blueprints & IaC discipline

Infrastructure designed to prove what it does.

Rectangle applies a formal verification discipline to its sovereign blueprints, designed to catch drift, privilege escalation and residency violations before they reach production.

  • Blueprints carry machine-checkable invariants
  • Residency, identity and network policy validated at plan time
  • Failures surface as rejected plans — designed to avoid silent corrections

Human-in-the-loop ops

Designed so changes require explicit human approval.

Every change — manual, GitOps or AI Mode — is designed to pass a human approval gate scoped to the compliance domain it affects. Approver identity is attached to the signed plan and captured as evidence.

  • Approval domains: compliance, peppol, identity, runtime
  • Approver identity bound to signed plan hash
  • Approval evidence captured in LTA

Sub-processors

Outscale (SecNumCloud IaaS). Selected EU sub-processors for trust services. Full list on request.

OutscaleEU trust providers

Evidence export

Signed, queryable evidence — plans, approvals, deploys, drift events — exportable per regulator request, retained per regulatory horizon.

JSONPDFCSV

Incident posture

Sovereign incident response with regulator-aligned notification windows aligned to NIS2 and DORA expectations.

status · all systems nominal

Residency & data flows

Where your data lives — visible at plan time.

Residency is a blueprint invariant. Plans surface the target region before approval; ArgoCD reconciles against signed state. Designed to avoid accidental drift into non-EU control planes.

fr-par-1
primary · Outscale SecNumCloud
fr-par-2
replica · Outscale SecNumCloud
eu-west
available · EU zone
ovh / hybrid
roadmap

Request the trust pack

Everything procurement, security and audit need — in one signed package.

Sent within one business day under NDA, signed and timestamped, aligned with the current version of each document.

What's included
  • Security overview — architecture, controls, disclosure policy
  • Sub-processors list with roles and jurisdictions
  • Residency map — sovereign zones and data flows
  • DPA template aligned with GDPR Article 28
  • Evidence export sample — signed JSON / PDF / CSV