Sovereignty French project management software
Looking for French project management software means looking for something other than a flag on a home page. The word covers at least four different realities, and two vendors who use it may not be talking about the same thing. Here is what to check, what we hold, and what we do not claim.
What “French” really covers.
Four questions to ask any vendor. They cost nothing and they sort quickly.
Headquarters
Where the company is registered, and under what law its contracts are written.
Hosting
Where the data physically resides, and above all what law the host itself is subject to.
Backup
With whom the backup copy resides. A backup at the main host does not protect against losing that host.
Capital
Who owns the vendor. This is the level people forget, and the one that can change without warning.
Born in Europe does not mean stayed in Europe.
In 2025, Sciforma (Neuilly) came under Planview (Texas) and Forecast (Copenhagen) under Accelo (United States). Both vendors were European when their clients chose them.
An acquisition moves the prospect under extraterritorial jurisdiction without their having decided it. No contractual clause protects against this, because it is not the contract that changes: it is the law applicable to the shareholder.
This is why the first three levels are not enough. French hosting at a vendor owned outside Europe remains French hosting, and exposed data.
At pylotik.
The four levels, in order, with no gray area.
Designed and published in France
pylotik is a brand published by orgatypik, in Toulouse. The capital is French and it is not open.
Hosted by a provider under French law
It is not only a data center located in France: it is a host subject to French law, with no US parent company: it is not subject to the Cloud Act on that basis, and this comes from its structure, not from a clause.
Backups at a second provider
French too, and distinct from the main host. This is the direct lesson of the Strasbourg fire in 2021: the backup never resides at the main host.
Data in the European Union
The General Data Protection Regulation is not a layer added on top: the site sets no cookies and does not measure audience, and fonts are self-hosted.
The technical detail, the audit logs and the separation between organizations are on the sovereignty and security page.
What about the Cloud Act?
Sovereign project management software is not judged by the location of its data center, but by the law governing those who run it. The Cloud Act allows a US authority to demand data from a company subject to US law, wherever that data is stored. The publisher of pylotik, its host and its backup provider are companies under French law with no US parent company: the Cloud Act does not target them on that basis.
This is a fact of structure, which can be checked in the legal notice and on the sovereignty page, and which must be rechecked if one of these providers changed shareholder. The vendors compared in French project steering software publish their own hosting commitments.
In a market where everyone overclaims, here are our limits.
We are not SecNumCloud qualified, and we do not imply otherwise. Hosting is on standard instances, outside any qualified scope. An organization whose specification requires this qualification should know before consulting us, not after.
Nor do we claim any security certification or sector approval. What we hold are the four levels above, verifiable, and the fact of answering a security questionnaire point by point when we are sent one.
This page says what we do not do because it is the only way to make what we do credible.
A sovereign tool closes a leak that others leave open.
Sovereignty is not only a matter of compliance. Without a tool that holds the project end to end, each team deploys its own: a file space, a shared board, personal note-taking. Project data then lives everywhere and nowhere, often on accounts tied to individuals rather than to the organization.
French project management software is therefore not worth only for its jurisdiction: it is worth it because it brings back into a governed framework what had scattered. This is one of the seven leaks described in value lost in projects.
On substance, what the tool holds is described in operational commitment management, and its functional scope on the product page.
What we are asked about sovereignty.
Where is the data hosted?
In France, at a host under French law, with data that stays in the European Union and backups at a second French provider. The detail is on the sovereignty and security page.
Why is the hosting of pylotik not subject to the Cloud Act?
The Cloud Act allows a US authority to demand data from a company subject to US law, wherever that data is located. The question therefore does not come down to the location of the data center but to the law governing the host and the publisher, and to their shareholding. The publisher, the host and the backup provider of pylotik are companies under French law, with no US parent company.
Are you SecNumCloud qualified?
No, and we do not imply otherwise. Hosting is on standard instances, outside the qualified scope. If your specification requires it, it is better to know now.
Do you answer security questionnaires?
Yes, point by point, including when the answer is negative. This also applies to public-sector and large-account procurement questionnaires. Write to us from the contact page.
What happens if you are acquired?
It is the right question to ask any vendor, ourselves included. The capital is French and closed today. We will not write here a promise that only the future can keep; we simply observe that the subject deserves to be raised before signing, not after.
Does the site set cookies?
None, and it does not measure audience. Fonts are self-hosted, so no visitor address is sent to a third party. See the privacy policy.
Going further.
- Hosting, GDPR and security: the technical detail, and what we do not claim.
- Project steering software: what the tool holds, beyond its jurisdiction.
- Operational commitment management: the definition of the category.