Data
Residency, backups, logs, subcontractors, retention periods, and export formats are documented.
French agency · Sovereign applications
Sovereign and reversible application development agency —designed in France.
We design and manage applications in France with controllable hosting, data, code, and dependencies. Tailored to your requirements: France, Europe, HDS, or SecNumCloud-qualified offerings.
- Design and management in France
- Hosting in France or Europe as needed
- Transferable source code and data
- Documented architecture and dependencies
Sovereignty matrixcontrolled architecture
Dataresidency · exports
CodeGit · documentation
InfrastructureFrance · Europe
Operationsaccess · takeover
01 — A concrete definitionSovereignty is not just
Sovereignty is not just
to hosting.
We examine where your data resides, who operates the infrastructure, which dependencies could block a takeover, and how to transfer the system.
Code
The full source code is version-controlled, documented, and transferable to the client.
Infrastructure
Providers, regions, accounts, access rights, and recovery procedures are explicitly defined.
Operations
Proprietary dependencies and conditions for handover to another team are known.
02 — Three levels of controlThe right level of sovereignty,
The right level of sovereignty,
without over-engineering.
An application does not require the same setup whether it manages an internal tool, health data, or an essential service. We make the trade-offs explicit.
Documented reversibility
For a business application that must remain recoverable: transferable Git repository, standard database, inventoried exports and dependencies.
France or EU residency
Application, data, backups, and logs hosted in the selected regions; third-party flows mapped.
Regulated scope
For healthcare or sensitive data: deployment on the HDS service or the qualified SecNumCloud offering specifically selected for the project.
03 — Regulated scopesQualification belongs
Qualification belongs
to a specific offer.
A certification applies to a precise service and scope, never automatically to the entire application. We verify and document the selected offer for each project.
HDS hosting via Scalingo
Scalingo PaaS · HDS 2.0We can deploy a health data processing application on Scalingo’s PaaS, which is HDS 2.0 certified for all six activities. Final compliance depends on the project’s scope and architecture.
The certification covers the Scalingo service and its scope, not automatically Scroll or the application.
Certificate no. 38436-2 · valid until 11 September 2028View Scalingo’s HDS certificate
Deployment on a SecNumCloud-qualified offer
Precise offer · verified scopeDepending on requirements, we can deploy on a SecNumCloud-qualified OVHcloud offer, such as Private Cloud SecNumCloud or Bare Metal Pod. The exact offer and its scope are specified in the architecture file.
A standard OVHcloud infrastructure is not SecNumCloud by default, and the application is not presented as qualified by inheritance.
Exact offer to be validated for each architectureView OVHcloud’s SecNumCloud offers
04 — Deliverable reversibilityYou can take over the system,
You can take over the system,
not just use it.
Reversibility becomes real when it produces verifiable deliverables, handed over throughout the project rather than on the last day.
Transferable Git repository
History, branches, delivery procedures, and access rights can be taken over by your team or a third party.
Exportable data
Documented schema and exports in standard formats, without relying on a proprietary interface.
Reclaimable infrastructure
Accounts, environments, domains, certificates, secrets, and responsibilities are inventoried.
Third-party services inventoried
Every dependency, licence, location, and exit condition is made visible.
Backup and restore
Backups, restore tests, and recovery objectives are tailored to the service’s criticality.
Documentation and handover
Runbooks, architecture, and transfer sessions enable another team to operate the system.
05 — Proof in productionArchitectural choices
Architectural choices
already implemented.
Migration to an open stack, self-hosting, or French AI: these principles have already guided applications delivered by Scroll.
From a Bubble platform to a self-hosted open-source stack.
Gradual migration to Next.js and self-hosted Supabase on OVHcloud, with data takeover and service continuity.
Migration with no service interruption
View the ProtectUs case A Mistral agent integrated into an internally operated workflow.
Qualification of incoming requests using Mistral, n8n, and Dolibarr, in an architecture where flows and access remain documented.
100 % of incoming requests automatically qualified
View the Imalize case 06 — Our methodChoose, build,
Choose, build,
then hand over.
We start from your actual constraints, not a generic label. Every architectural decision is tied to a risk, a cost, and a recovery plan.
Map
Data, flows, subcontractors, dependencies and obligations are inventoried before selecting an infrastructure.
Decide
France, Europe, HDS or SecNumCloud: the level is chosen based on risk, constraints and budget.
Build or migrate
We prioritise open standards, replaceable components, tests and verified backups.
Document and hand over
Access, exports, operational procedures and recovery plans are provided and kept up to date.
07 — FAQSovereign applications:
Sovereign applications:
frequent questions.
We clarify the scope before any commitment: hosting, transfers, providers and reversibility conditions.
An application where data, code, infrastructure and operations remain controllable and transferable. The practical level depends on the project’s risk and obligations.
No. Backups, logs, subcontractors, access, third-party services, licences and export options must also be reviewed.
In France or within the European Union, depending on the validated architecture. The region, backups and any third-party flows are documented.
The client can retrieve the code, export their data, regain access and entrust operations to another team without any blocking dependency on Scroll.
Yes, via an architecture using a suitable HDS service, such as Scalingo. The exact HDS scope is verified and documented for each project.
No. Only certain specifically qualified offers are. We name the selected service and its scope, without automatically assigning the certification to the application.
Yes. We first audit the code, data, workflows, and dependencies, then prepare a gradual migration with backups and a rollback plan.
Let’s discuss your architecture
What level of sovereignty does your application truly require?
We map your constraints and propose a clear, costed, and reversible architecture.
Speak with Scrollcontact@agence-scroll.com+33 6 48 03 90 2720 Rue des Taillandiers
75011 ParisResponse within 24 business hours.
75011 ParisResponse within 24 business hours.