OVHcloud secures SecNumCloud qualification for SNC Cloud Platform

OVHcloud has obtained the SecNumCloud qualification, issued by ANSSI, the French cybersecurity agency, for its SNC Cloud Platform. For anyone managing regulated workloads in France or within the EU, this means being able to use a public cloud with self-service provisioning and pay-as-you-go billing within a regulator-approved perimeter, rather than having to choose between agility and compliance.

This is the third SecNumCloud qualification achieved by OVHcloud, following Bare Metal Pod and VMware on OVHcloud. Together they cover different use cases: from fully isolated dedicated environments through to the more flexible self-service model on which SNC Cloud Platform is built.

What the audit actually checks

The qualification is not a self-certification. The company describes an audit carried out by an independent assessor under ANSSI's authority, covering almost 1,200 requirements across the entire value chain: infrastructure, operations, governance, organisation and security. As confirmed by ANSSI's official documentation, the SecNumCloud framework applies to IaaS, PaaS, SaaS and CaaS services, combining technical requirements (encryption, network isolation, privileged access management) with legal requirements around immunity from extraterritorial laws such as the US Cloud Act.

Why it matters now

The timing is no accident. The decree of 14 April 2026, which came into force on 17 April, makes it legally binding for state administrations, their operators and six public interest groupings to use SecNumCloud-qualified cloud providers to host particularly sensitive data, in application of Article 31 of Law No. 2024-449 of 21 May 2024 (SREN). The same pressure is spreading to regulated sectors such as healthcare, finance, industry and energy.

Availability timeline

Component	Availability
SNC GRA region	already available
SNC SBG region	early November
SNC RBX region	January
Metal Instances and VMs on dedicated hosts	end of November
GPU instances	end of February

The current catalogue covers virtual machines, block storage, S3-compatible object storage, secure private networking, and tenant and access management; containers, managed databases and AI services are planned for upcoming phases. OVHcloud has announced that the platform will also roll out to public cloud regions in Italy, Germany and Poland, with adaptations to each country's national requirements.