Why it matters
This is not, first and foremost, a compliance issue. It is a question of power.
Which data are we talking about? Not e-commerce data. The map of a society's solidarity: who helps whom, who is present for whom, who is isolated, who is vulnerable, who depends on whom.
Given time, mutual aid, care for the elderly and for families — in aggregate, these are the most intimate data there are: the social graph of a territory's fragility and generosity. Under a foreign jurisdiction that can demand them, this graph ceases to be a trace of connection and becomes an instrument.
You do not entrust the map of a people's vulnerability to an infrastructure that a foreign state can compel to open. Sovereignty, here, is not nationalism: it is keeping this graph under a law we can democratically control.
Two futures
2042 or 1984?
The infrastructure of social bonds can take two directions. One is already settling in, by default. The other is a choice — ours.
1984 — the extractive model
- Our generosity becomes someone else's data asset
- Care infrastructure depends on private operators, beyond democratic control
- The citizen becomes a product
- Extractable data, under foreign law, with no way back
- Data as a lever for surveillance
2042 — the sovereign model
- The time we give stays a trace of a bond, and remains ours
- The infrastructure is a commons, collectively governed
- The citizen remains sovereign
- Data under European law, auditable, reversible
- Trust as the foundation — written rules
1984 is not a prophecy: it is a slope, that of the default model. 2042 is a decision — one we commit to proving, not merely stating.
Sovereignty, concretely
Hosting in Europe is not enough.
A US-law company — or its subsidiary — can be compelled to hand over the data it hosts, even if its servers are physically in France (CLOUD Act, 2018)2. Sovereignty is not measured by the geography of servers, but by the legal nationality of the operator.
Data residency
Where the servers physically are.
Legal sovereignty
Which law the operator answers to. ← what matters.
Our requirement: data operated by a French entity, not subject to any extraterritorial law, with the ANSSI SecNumCloud qualification5 as our horizon.
Our sovereign roadmap infrastructure in France
Course held: France, under French law.
Since July 2026, our entire operational infrastructure — database, websites, DNS, email, backups and source code — is hosted in France, on a self-hosted open-source stack we operate end to end, with a French-law operator, beyond the reach of the CLOUD Act. All that remains are accessory technical dependencies (TLS certificates, software images) through which no personal data passes.
Transparency applies to what remains, too. Our stack is under French law, but not yet SecNumCloud-qualified (the ANSSI's highest level) — that is our next milestone. The former hosts are kept for a few days as a safety net, then switched off.
Open & reversible
Nothing to hide, nothing that locks you in.
Our code is open and auditable. Your data belongs to you: full portability, export at any time, no proprietary lock-in. A partner can verify, take over, or leave — without friction. Trust is proven, not decreed.
Structure, mission & Constitution
Written rules, not promises.
What protects an infrastructure of social bonds is written, enforceable, governed rules: our Digital Constitution — a “we” voice, no dark patterns, data rights, reversibility. It turns “trust us” into “check our rules”.
Today the activity is carried by a sole proprietorship (auto-entreprise, TEMPOsystem) — the foundation we start from. The TEMPOSYSTEM trademark is registered with the INPI done. Our roadmap targets “société à mission” status (PACTE Act, 2019)8 and ESUS accreditation in progress.
Impact
Measuring what matters.
TEMPOSYSTEM measures the time given between citizens, associations and territories. Every second offered becomes a living trace — not a claim, not a currency, but the proof of a bond.
Partner FAQ
Your questions, our answers.
Where is the data hosted?
All our data — and our entire application stack — is hosted in France, with a French-law operator, on an open-source infrastructure we run ourselves. No personal data outside Europe. infrastructure in France
Are you subject to the CLOUD Act?
The risk — citizens' data with a US-law operator — has been removed: database, websites, email, backups and code are now in France, outside the scope of the CLOUD Act (server location is not enough — Schrems II, CJEU 2020). All that remains are accessory technical bricks (certificates, software images) with no personal data. infrastructure in France
Are you GDPR-compliant?
Yes, by design: minimisation, legal basis and consent, rights of access/rectification/erasure, records of processing. A contact point is available to exercise your rights.
Is the code open and auditable?
Yes, published and consultable. An IT department or an auditor can verify for themselves how data is handled.
Can data be retrieved / exported?
Yes, at any time, in an open and reusable format. The right to portability (Art. 20 GDPR) is built in: export is native.
What happens if we want to leave?
You leave with your data, without friction or exit cost. No proprietary lock-in; reversibility is a contractual commitment.
What is your legal structure?
TEMPOSYSTEM trademark registered with the INPI (2026). Today the activity is carried by a sole proprietorship (auto-entreprise, TEMPOsystem) — the starting point. Roadmap toward “société à mission” status (PACTE Act) and ESUS accreditation.
Are you aiming for SecNumCloud?
Yes. SecNumCloud (ANSSI) guarantees both residency AND legal sovereignty — the level expected for the public sector's sensitive data (“Cloud au centre” doctrine, 2021).
Is the site accessible (RGAA)?
Yes, accessibility considered from design (AA level). An accessibility statement will be published.
How is the service funded?
A sustainable model: the essentials are free, no paywall before value. Membership, support, partnerships — never the resale of data.