GPLExpert

What GPLExpert does

GPLExpert is a French IT services company founded in 2008, structured as a SAS with €100,000 share capital and now operating as a subsidiary of Groupe ITP. It specializes in managed IT infrastructure, certified health data hosting, and cybersecurity exclusively for healthcare establishments in France — hospitals, clinics, medico-social facilities, and specialized centers — and serves more than 100 such organizations, including large hospital groups such as Ramsay Générale de Santé, Vivalto Santé, Almaviva, Groupe Saint-Gatien, Capio, and the Institut Universitaire de Cancer de Toulouse. Its position is anchored on holding the mandatory HDS (Hébergeur de Données de Santé) certification across all five activity scopes alongside ISO 27001 information security certification — jointly a legal prerequisite for any provider hosting French health data — combined with operational experience accumulated over more than a decade.

The company's core technology stack is a sovereign open-source infrastructure running on Proxmox virtualization, Veeam backup, pfSense firewall, and Debian-based systems, hosted entirely in certified French datacenters. The product surface comprises certified HDS hosting, S3-compatible object storage for large medical volumes (imaging, backups, archives), managed IT operations (infogérance) with 24/7 SOC and NOC supervision, externalized backup with encrypted transfer and remote-site replication, and a full cybersecurity offering including black-box, grey-box, and white-box penetration testing, PSSI drafting, PCA/PRA planning, risk analysis, social engineering testing, and cyber incident response. Adjacent services include outsourced CIO functions (DSI externalisée), compliance consulting for HDS, ISO 27001, RGPD, and HAS, QUALIOPI-certified IT training, and hardware/software supply.

GPLExpert generates revenue through multi-year B2B enterprise contracts with healthcare establishments on a quote-based, custom-pricing model — no public pricing exists. Revenue streams are predominantly recurring managed services (HDS hosting, infogérance, SOC/NOC, externalized backup), supplemented by project-based professional services (pentest, incident response, compliance consulting, DSI externalisée, training) and lower-margin hardware/software resale. Distribution is exclusively direct enterprise field sales targeting CIOs (DSI) and IT directors in healthcare facilities, with no channel partners; marketing leans on a regulatory-focused blog, SEO, LinkedIn, and credibility earned through Cybermalveillance.gouv.fr reference and the Expert Cyber label. Operations are 100% French-jurisdiction, consistent with the firm's sovereign positioning ahead of the March 2026 territoriality decree for health data.

Name

GPLExpert

Legal name

gplexpert

Website

https://gplexpert.com

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

11–50 employees

Short description

French IT services provider founded in 2008 and part of Groupe ITP, delivering HDS-certified hosting, managed IT services, and cybersecurity exclusively to healthcare establishments in France, with ISO 27001 and sovereign open-source infrastructure.

Ownership category

akta.pro rank

Product category

Healthcare IT Managed Services

NAICS

Computer Facilities Management Services (541513), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Processing & Data Preparation (7374)

akta.pro primary industry

Data Center Operations & Managed Services (Remote Hands, NOC/SOC) (HDABANAA)

akta.pro secondary industry

Backup & DR Software Implementation & Managed Platforms (BPAEALAI)

Keywords

• Healthcare IT hosting
• HDS data hosting
• Managed IT services
• Healthcare cybersecurity
• Compliance consulting

Headquarters

HQ city

Arpajon

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations, Supply Chain

Revenue model

1. Managed IT Services (Infogérance): Ongoing managed IT services including supervision, security monitoring, SOC, NOC, technology watch, and maintenance of healthcare IT infrastructure. Revenue is recurring, contract-based, billed on a periodic cadence.
2. Healthcare Data Hosting (HDS): Certified HDS hosting services including physical hosting, virtual infrastructure, application platform hosting, and S3-compatible object storage. Revenue generated through hosting contracts with healthcare establishments.
3. Cybersecurity Services: Security services including penetration testing (pentest), security audits, PSSI drafting, cyber incident response, and social engineering testing. May be project-based or retainer contracts.
4. Regulatory Compliance Consulting: Consulting services for certifications including HDS, ISO 27001, RGPD/GDPR compliance, and HAS accreditation. Includes audit preparation and ongoing compliance support.
5. IT Governance & DSI Externalisée: Outsourced CIO/CTO services (DSI externalisée) for healthcare establishments, including IT strategy, governance, SÉGUR du numérique and HOP'EN program support.
6. Training (Centre de Formation): IT training services delivered through the company's training center. GPLExpert is QUALIOPI certified and declared as a training organization (N° 11 91 06242 91).
7. Hardware & Software Supply: Supply and management of computer hardware and software licenses for healthcare establishments, including ongoing license and warranty management.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels6 records

Core offering

GPLExpert delivers certified healthcare data hosting (HDS), managed IT services (Infogérance including SOC/NOC supervision), and cybersecurity services (penetration testing, PSSI, PCA/PRA, incident response) to French healthcare establishments. The portfolio also includes S3-compatible object storage, outsourced CIO services, compliance consulting for HDS/ISO 27001/HAS/RGPD certifications, professional IT training, and hardware/software supply. All infrastructure is hosted in 100% French sovereign datacenters on an open-source stack (Proxmox, Debian, pfSense, Veeam).

Product overview

GPLExpert is a managed services provider specializing in IT infrastructure, hosting, and cybersecurity for healthcare establishments in France. The core offering centers on certified HDS (Hébergeur de Données de Santé) health data hosting combined with ISO 27001 information security management. The service portfolio includes managed IT operations (Infogérance), externalized backup solutions, IT security services (including penetration testing, incident response, and security audits), sovereign hosting ensuring French jurisdiction compliance, S3-compatible object storage, outsourced IT management (DSI externalisée), and compliance consulting for HDS, ISO 27001, HAS, and GDPR certifications. Additional services include the CaRE cybersecurity program, technical engineering, hardware/software procurement, and IT training. The company serves over 100 healthcare establishments and operates as part of the Groupe ITP.

Differentiator

Problem solved

Functional benefit

Products and services

• Hébergement de Données de Santé (HDS) Certified health data hosting service providing secure infrastructure for sensitive medical information, compliant with the French HDS (Hébergeur de Données de Santé) standard and ISO 27001. Covers physical infrastructure hosting, virtual infrastructure, application platform hosting, system administration/exploitation, and externalized backup. Targeted at French healthcare establishments.
• Infogérance & Services Managés Managed IT services for healthcare establishments including 24/7 supervision, security monitoring, SOC and NOC operations, technology watch, and ongoing maintenance of health information systems.
• Sécurité Informatique IT security services for healthcare organizations, including security audits, PSSI (Information System Security Policy) drafting, BCP/DRP (PCA/PRA) planning, and cybersecurity risk analysis.
• Sauvegarde Externalisée Externalized backup solutions for healthcare establishments providing encrypted data transfer, isolated backups, replication to secure remote sites, regular restoration testing, and compliance with health data hosting requirements.
• Test d'Intrusion (Pentest) Ethical penetration testing using Black Box, Grey Box, and White Box methodologies, plus social engineering and phishing campaigns, to identify vulnerabilities in healthcare information systems before exploitation by attackers.
• Hébergement Souverain Sovereign hosting services ensuring that healthcare data remains under French and European jurisdiction, compliant with the territoriality requirements strengthened by the March 2026 decree and offering a GAFAM-free alternative built on open-source technologies (Proxmox, Debian, pfSense).
• Stockage Objet compatible S3 S3-compatible object storage hosting solution, deployed within HDS-certified French infrastructure, designed for managing large volumes of healthcare data including medical imaging, backups, and archives with scalable, secure storage.
• DSI Externalisée Outsourced IT management (DSI externalisée) service providing IT strategy, governance, cost control, and information system security direction for healthcare establishments undergoing digital transformation.
• Accompagnement Certifications (HDS, ISO 27001, HAS) Consulting services guiding healthcare organizations through the certification processes for HDS (Hébergeur de Données de Santé), ISO 27001, and HAS accreditation, including audit preparation and ongoing compliance support.
• RGPD / GDPR Compliance General Data Protection Regulation (GDPR/RGPD) compliance assistance to help healthcare structures implement data protection requirements and simplify their regulatory environment.
• Programme CaRE Cybersecurity program (CaRE) accompanying healthcare structures from candidacy through full implementation, delivering enhanced data protection and care continuity assurance.
• Réponse aux Incidents Cyber Cybersecurity incident response services for healthcare establishments facing cyberattacks, providing rapid containment, eradication, and recovery support.
• Matériels & Logiciels Hardware and software supply service for healthcare establishments, including continuous technology watch, pre-selection of IT and medical equipment, and ongoing license and warranty management.
• Formation Informatique QUALIOPI-certified IT training services for healthcare professionals, delivered through the company's training center (declared under N° 11 91 06242 91).
• Ingénierie & Architecture SI Technical engineering services to design, size, and deploy secure, high-performance IT infrastructure tailored to healthcare establishment requirements, including Proxmox deployment and migration from VMware/Hyper-V.

Quantifiable outcome

• Over 100 healthcare establishments trust GPLExpert for their IT infrastructure and data hosting needs
• +1 more outcomes

Named customers10 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Six partnerships are on record, tiered core.

• Proxmox (Open Source)coreTechnology or IntegrationGPLExpert specializes in Proxmox VE (virtualization environment) and Proxmox Backup Server deployment, migration from VMware/Hyper-V, infrastructure design, and security hardening. Proxmox is a core open-source virtualization platform used throughout GPLExpert's HDS-certified hosting stack.
• Veeam SoftwarecoreTechnology or IntegrationGPLExpert is a Veeam partner recommending and deploying Veeam Backup & Replication and Veeam Endpoint Backup for healthcare data backup and restoration. Some engineers hold VMCE (Veeam Certified Engineer) certification. Veeam is a key component of the company's data protection stack.
• Certified Datacenter SubcontractorscoreTechnology or IntegrationPhysical hosting of healthcare data infrastructure is ensured by certified (or agréé) datacenter subcontractors. These partners provide the physical sites (bâtiments) that host the material infrastructure used for health data processing, as required under the HDS certification framework.
• Groupe ITPcoreStrategic or Co-development PartnerGPLExpert is a company of the Groupe ITP (itp-groupe.fr). The group provides a broader ecosystem of IT services, and GPLExpert operates within this group structure. The evolution of GPLExpert integrating into Groupe ITP strengthens its market position in the French healthcare IT sector.
• LSTI (Certification Body)coreOthersLSTI is the COFRAC-accredited certification body that issued GPLExpert's HDS and ISO 27001 certifications. The ongoing annual audit relationship with LSTI validates the company's compliance with both certifications.
• Cybermalveillance.gouv.fr / ANSSIcoreStrategic or Co-development PartnerGPLExpert is officially referenced on Cybermalveillance.gouv.fr (operated by ANSSI and ACYMA), the national cybersecurity assistance platform. The company is also labeled 'Expert Cyber' through this ecosystem. GPLExpert participates in national cybersecurity awareness initiatives and uses the official Cybermalveillance kit for client sensitization.

Scale indicators4 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Cloud Temple: French sovereign cloud provider with HDS certification offering secure hosting, managed services, and cybersecurity to sensitive workloads including healthcare. Closely comparable to GPLExpert in combining HDS hosting, managed services, and security for the French regulated market.
• Outscale: Sovereign cloud provider owned by Dassault Systèmes, HDS-certified, delivering IaaS and managed services to French healthcare and regulated industries. Directly comparable to GPLExpert in sovereign, HDS-certified cloud infrastructure and managed-service delivery model.
• Scaleway: French cloud provider holding HDS certification with a sovereign, European positioning, offering object storage, compute, and managed services. Comparable to GPLExpert in sovereign infrastructure approach and HDS-eligible hosting.
• NumSpot: French sovereign cloud joint venture (Docaposte, Bouygues Telecom, Caisse des Dépôts, OBS) targeting sensitive workloads including healthcare with HDS-grade offerings. Directly comparable as a French sovereign/HDS competitor to GPLExpert.

Broad incumbents

• OVHcloud: Largest French cloud provider with HDS certification across multiple activity scopes, offering sovereign IaaS, hosting, and managed services. A broader incumbent that competes with GPLExpert in HDS hosting but operates at significantly greater scale and breadth.
• Eviden (Atos Group): Major European IT services and cybersecurity provider with a dedicated healthcare practice, offering managed services, hosting, and security to hospitals and health systems. Broad incumbent competing with GPLExpert for healthcare IT and managed-security budgets.
• Sopra Steria: Large French-headquartered IT services group with a substantial healthcare vertical offering managed services, infrastructure, and digital transformation. Competes with GPLExpert for French hospital IT and digital transformation (Ségur, HOP'EN) programs.
• Capgemini: Global IT services and consulting firm with a significant French healthcare practice spanning managed services, cloud, and cybersecurity. Competes with GPLExpert for larger healthcare IT engagements and program delivery in France.
• Cegedim: French healthcare-specialized IT and software company offering hosting, managed services, and applications to healthcare professionals and establishments. Comparable to GPLExpert as a healthcare-vertical specialist with hosting and managed services.
• Thales: Major European cybersecurity and digital identity provider with healthcare-focused security offerings and a sovereign cloud partnership (S3NS) relevant to French health data. Adjacent competitor to GPLExpert in healthcare cybersecurity and sovereign infrastructure.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/gplexpert
• Xx.com/GPLExpert
• Facebookfacebook.com/gplexpert

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about GPLExpert