Cloud Temple, the first French cloud provider to secure its customers' applications to the highest security standards

With its PAMS (Secure Administration and Maintenance Provider) certification, Cloud Temple holds both of french ANSSI’s highest security certifications: Cloud Security and Software Administration Security.

The french security national agency (ANSSI) has awarded Cloud Temple the PAMS (Secure Administration and Maintenance Provider) certification. Having already qualified as SecNumCloud, Cloud Temple is the first french cloud provider to hold both high levels of security. In practical terms, a hospital, bank, or government agency can now entrust a single provider—audited end-to-end by the national authority—with hosting its critical applications and managing the software powering them.

Cloud Temple secures customers applications to the highest security standards

In the cloud, servers, networks, and databases are already managed to the highest standards—that’s what SecNumCloud guarantees. But on top of that are each customer’s software, business software packages, internal applications, and data platforms, which also need to be managed, updated, and fixed. Attackers are now exploiting these access points to gain entry.

In August, the french General Directorate of Public Finance (DGFIP) acknowledged that stolen credentials—including those of an authorized third party—had been used to extract data from 678,000 taxpayers. According to the Verizon Data Breach Investigations Report 2026, 48% of data breaches now involve a third party.

Here's what the PAMS certification actually guarantees.

The certification requires strict rules: secure access, strong authentication, authorized teams, and traceability of actions performed. These measures are audited by an independent body before the french security agency ANSSI grants the certification. With SecNumCloud as the foundation and PAMS for everything built on top of it, every point of access—from the physical layer to the final administration screen of a business application—meets the same level of requirements, verified by the same authority.

AI makes this continuity essential.

ANSSI notes that generative AI is now part of attackers’ toolkit and enables them to scale their operations. At the same time, the applications deployed by companies are becoming increasingly AI-based—including agents and business assistants that operate with extensive access rights to the most sensitive data.

Cloud Temple, which operates a sovereign AI platform in France on its certified infrastructure, now applies the same security framework to these applications across the entire chain.

Two years of work.

For two years, Cloud Temple has mobilized a dedicated team to adapt its tools and procedures, strengthen the isolation of its environments, and train the relevant teams. This initiative extends the SecNumCloud project, to which the company had already devoted two and a half years and seven million euros.

No executive wonders whether their cloud is secure. They wonder whether their application will be running tomorrow morning—and who has control over it. Until now, the government’s guarantee stopped at the data center’s door. With this dual certification, it covers the entire chain for the first time—from the infrastructure to the final point of access to the business software. Now that AI has reduced the cost of an attack, security can no longer be just a marketing promise. Trust cannot be decreed—it must be audited.. Sébastien Lescop, CEO of Cloud Temple

This dual certification covers the full range of Cloud Temple’s managed services, which are used by clients such as the Banque de France, Naval Group, Veolia, and Suez.

Cloud Temple also operates the public cloud service marketed by SFR Business and is rolling out its model in Germany—where it holds C5 certification—and in Spain.