Situation — AI, digital and software projects

We have to deliver software to our client, and it is our name on the line if it has a security flaw.

Context

You are an agency, an IT services company or a consultancy. Your client is waiting for software. Your team is already fully booked, or you lack a skill.

You want to outsource the development, without losing the relationship with your client. And without delivering software whose security you don't control.

The problem

  • Whoever delivers the software answers for it. A flaw found at your client's end lands on you.
  • The more sensitive the data processed, the heavier the bill.
  • Your client wants to own their software: you must be able to transfer the code to them.

Case study

Real-life caseDecember 2025

NEXPUBLICA FRANCE, software publisher for social services

In November 2022, clients of NEXPUBLICA FRANCE reported a serious problem. In PCRM, the publisher's software used by France's departmental disability centres, users could see documents concerning other people.

Inspections by the CNIL (French data protection authority) found widespread weaknesses in the information system. The CNIL criticised the publisher for allowing fundamental security problems to persist.

On 22 December 2025, the CNIL fined the publisher 1.7 million euros, in a decision made public. It took into account the number of people affected and the presence of data revealing a disability.

In October 2026, two serious flaws were disclosed in PHP, the language behind much web software. Older versions no longer receive security patches: these servers must be isolated, then migrated (CERT-FR (opens in a new tab)). According to Qualys, around 71% of the PHP installations it tracks run on these end-of-life versions (SecurityWeek (opens in a new tab)).

Read the sourceData breach: the CNIL fined NEXPUBLICA FRANCE €1.7 million — European Data Protection Board (opens in a new tab)

Why us?

  • We develop for you, under your name if you wish (white label), in your repository, following your conventions.
  • Every development goes through testing and a security review before delivery.
  • The project code is assigned to you, with the right to assign it to your client.
  • Doctoral-level expertise in cybersecurity and AI: security is our original field.

Contact us

Talk to an expert

A free 30-minute video call with one of our experts, then your free quote, with no commitment.

Take the diagnostic

A few questions, the first already answered for your situation: your answers help us prepare the video call. Free, no sign-up, about 2 minutes.

Take the diagnostic