Sign inSign up
Sign up

Sovereignty

Our definition of sovereignty

For ANCRALE, sovereignty is something you prove. It comes down to four commitments, which this page proves:

  • 1. The documents you upload to the service are processed in France, on the infrastructure of Scaleway (Paris region), a company governed by French law (see “Your processing chain”).
  • 2. A publisher and a contract under French law: the service is published by ANCRALE, a company governed by French law, under a contract governed by French law (see “Jurisdiction of the infrastructure”).
  • 3. These documents are not stored lastingly: they are erased automatically, no later than 24 hours after upload, and within the shorter delays in force given below, whether or not a task was started. What we no longer hold, we cannot hand over to anyone (see “Erasure of documents” and “Protection against access by third-country authorities”).
  • 4. You stay free: exporting your data and switching provider are free of charge (see “Your freedom to leave”).

These commitments concern the documents you upload to the service. Payment, which involves no document, is handled by a provider established in the European Union.

Jurisdiction of the infrastructure

  • Publisher of the service: ANCRALE, a simplified joint-stock company governed by French law, 61 rue de Lyon, 75012 Paris, France, Paris Trade and Companies Register 109 497 354.
  • Host of the service: Scaleway SAS, a company governed by French law, 8 rue de la Ville-l’Évêque, 75008 Paris, France, Paris Trade and Companies Register 433 115 904. The infrastructure of the service is located in its Paris region.
  • Where the data processed in the service is processed: France.
  • Law governing the contract: French law.

Erasure of documents

Documents and the text typed in the service are not stored lastingly. The contract sets a ceiling: their automatic erasure no later than 24 hours after upload or typing (Article 3 of the Terms of Use). The delays in force are the following:

  • erasure 15 minutes after the end of each task (16 minutes at most);
  • erasure 240 minutes after upload when no task is started;
  • download link for the output file valid for 10 minutes; downloading it does not bring the erasure forward;
  • a regular check that removes anything left over.

Protection against access by third-country authorities

  • Documents are not stored lastingly: after the erasure delays above, ANCRALE keeps no copy of them that it could disclose.
  • The data the service keeps, including account and organisation data, the audit trail (technical metadata of tasks, including cryptographic fingerprints, without the content or the name of the documents) and access logs, remains held by ANCRALE for the periods given in the privacy policy; the commitments below apply to it.
  • If a third-country authority asks for access to a customer’s data, ANCRALE informs the customer before complying, except where the request serves law enforcement purposes and for as long as necessary to preserve the effectiveness of the law enforcement activity; it discloses only the minimum data necessary.
  • Under Article 32 of Regulation (EU) 2023/2854, ANCRALE acts on a request from a third-country authority concerning a customer’s data only if it is based on an international agreement or if the conditions of that Article are met and, for personal data, in compliance with Chapter V of the GDPR, in particular its Article 48.
  • Technical and organisational measures: those of Annex 2 of the DPA, in particular encryption of exchanges, separation of each organisation’s data, access control and logging, and no lasting storage of documents.

Your processing chain

Who processes what, where and under which law, by type of data:

  • Documents: hosting of the infrastructure of the service by Scaleway SAS, in France, a company governed by French law; no third-party artificial intelligence service processes them.
  • Account and service data, including the audit trail and access logs: hosted by Scaleway SAS, in France, a company governed by French law, on the same infrastructure; kept as set out in the privacy policy.
  • E-mails of the service: sent by Scaleway SAS, in France, a company governed by French law.
  • Payment and invoices for plans subscribed to online: a payment provider established in the European Union (Ireland), which receives no document; the details are in the privacy policy.
  • Quotes and invoices for the Intégral plan: an e-invoicing platform established in France, which receives no document; the details are in the privacy policy.
  • www.ancrale.fr website: hosted by OVH SAS, in France, a company governed by French law; its audience measurement is a tool ANCRALE runs itself on an OVH SAS server located in France.

Sub-processors (Clause 5 of the DPA): Scaleway SAS (France, Paris region), for hosting the infrastructure of the service, on which documents are processed, and sending the service’s e-mails; no transfer outside the European Union. Any addition or replacement is notified to customers under Clause 5 of the DPA.

Your freedom to leave

Customers obtain an export of their exportable data free of charge, in self-service where the service offers it, otherwise on request to contact@ancrale.fr within a reasonable time, and, when switching provider, under Article 11 of the terms of sale. Switching provider, transferring the data and erasing it are free of charge. Register of export formats:

  • Account and organisation data, including the organisation’s settings: JSON (RFC 8259, UTF-8): the organisation’s identifier, the kind and expiry of its subscription; for each user, their favourite tools and display preferences.
  • List of users: JSON (RFC 8259, UTF-8): for each, their identifier, e-mail address, surname and first name.
  • Users’ roles: JSON (RFC 8259, UTF-8).
  • History of tasks (metadata, without content): JSON (RFC 8259, UTF-8).
  • Audit trail and sign-in security events: JSON (RFC 8259, UTF-8).
  • Activation events: JSON (RFC 8259, UTF-8).
  • Quota usage: JSON (RFC 8259, UTF-8).
  • Usage dashboard, for the plans that include it: CSV (RFC 4180, UTF-8).
  • Invoices: PDF, as issued by the payment provider for plans subscribed to online; the invoices for the Intégral plan are issued through Indy.

The self-service export is a ZIP archive (ISO/IEC 21320-1), specific to the user who requests it, holding the following JSON files (RFC 8259), encoded in UTF-8; dates and times in them follow ISO 8601:

  • The history of tasks: for each, its identifier (UUID, RFC 9562), the tool used, its status, the date and time it was created and those of its end; neither the name, the parameters nor the content of the document.
  • The Audit trail and sign-in security events: for each event, its identifier (UUID, RFC 9562), its type, its date and time, the pseudonymised identifier of its author and its technical data (JSON object).
  • The activation events: for each, its identifier, the onboarding step reached, its date and time and its technical data (JSON object, possibly empty).

The same data for the organisation’s other users, and the other data in the register, are provided to the customer on request, in the formats given above.

The detailed description of the fields of each export, their types and their possible values is included in every export and can be consulted, up to date, in the application; it is provided on request to the Customer and to the third parties it authorises.

Documents cannot be exported: they are erased automatically. Data specific to ANCRALE’s internal operation (code, infrastructure configuration, internal metrics) is excluded.

Certifications

As at 16 October 2026, Scaleway holds ISO/IEC 27001 certification, within the scope of its certificate, and is engaged in the SecNumCloud qualification of ANSSI, the French cybersecurity agency, for its “Scaleway SecNumCloud” offer, which it has not obtained. The Ancrale service claims no SecNumCloud qualification, and ANCRALE holds no certification of its own.

About this page

This page is an information document, kept up to date, to which the terms refer; it is not a contract document. It addresses Articles 26 and 28 of Regulation (EU) 2023/2854 on data (the “Data Act”): jurisdiction of the infrastructure, measures against unlawful access by third-country authorities and the register of export formats. It also publishes the list of sub-processors provided for in Clause 5 of the DPA. The four commitments of the first section restate those of the contract, which alone is authoritative: Article 15 of the Terms of Sale and Clause 6 of the DPA for the place of processing, Article 18 of the Terms of Sale for the governing law, Article 3 of the Terms of Use for erasure, Articles 11 and 12 of the Terms of Sale for export and switching provider.

Version

Version 1, in force from 1 December 2026.