Stelau Consulting
Stelau Consulting is a Paris-based boutique cybersecurity and digital identity consultancy, ANSSI-approved as a PVID evaluator and LSTI-accredited as an eIDAS/ISO 27001 auditor, serving French and European government agencies, Qualified Trust Service Providers, and system integrators with consulting, audits, and proprietary VDS/CEV and mDoc verification tooling.
- Company typePrivate
- Founded2002
- HeadquartersParis, France
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Stelau Consulting does
Stelau Consulting is a Paris-based cybersecurity and digital identity consultancy founded in 2002 by Nicolas Chalanset and Benoit Leger-Derville. The firm operates as a boutique specialist, staffed exclusively by cybersecurity engineers, and offers three core service lines: cybersecurity consulting and advisory (eIDAS, RGS, ISO/IEC 27001, IAM/SSO, cryptographic mechanisms), security audits and evaluations (notably ANSSI-approved PVID evaluations and LSTI-accredited eIDAS/ISO 27001 audits), and secure application development (security-by-design integration from project inception). The company also developed a small product portfolio centered on Visible Digital Seal (VDS/CEV) and mobile document (mDL/mDoc) verification, including the CEV creation and signing API deployed in production by the French Ministry of Interior, the VDS Verify mobile app, the mDoc Web Verifier (browser-based PWA over Web Bluetooth), and an Android Reader SDK implementing ISO/IEC 18013-5 proximity credential exchange. Stelau authored the proprietary TR-23111 Nested VDS specification (January 2025) extending ISO 22376 with Inner/Outer signature architecture and per-recipient ECDHE encryption.
The company's go-to-market is consultative and direct, targeting Chief Information Security Officers (RSSI) and General Management at French and European government agencies, Qualified Trust Service Providers, and technology integrators. Revenue is generated primarily through project-based professional services engagements, multi-year qualification and audit accompaniment mandates, SDK/API licensing (notably for the CEV creation API used by the Ministry of Interior), and bespoke secure software development. End-user products (VDS Verify app, mDoc Web Verifier) are distributed free of charge via app stores and the web. Customer concentration is high, with France Identité (Agence France Titres), the French Ministry of Interior, ANTS, a French QTSP, and Eviden (Atos group) representing the visible anchor client base. In June 2026, Stelau was acquired by iDAKTO, a French digital identity company, forming a combined entity of over 100 people serving more than 10 million active digital identity wallets across Europe, Africa, and the Middle East, positioning the group across the full digital identity value chain in service of eIDAS 2.0 and EUDI Wallet projects.
Stelau Consulting firmographics
Firmographics- Name
- Stelau Consulting
- Legal name
- Stelau Conseil
- Website
- https://stelau.com
- Company type
- Private
- Founded year
- 2002
- Operating status
- Acquired
- Headcount range
- 1–10 employees
- Short description
- Stelau Consulting is a Paris-based boutique cybersecurity and digital identity consultancy, ANSSI-approved as a PVID evaluator and LSTI-accredited as an eIDAS/ISO 27001 auditor, serving French and European government agencies, Qualified Trust Service Providers, and system integrators with consulting, audits, and proprietary VDS/CEV and mDoc verification tooling.
- Ownership category
- akta.pro rank
Where Stelau Consulting is headquartered
LocationHeadquarters
- HQ city
- Paris
- HQ country
- France
- HQ region
- Europe
Offices1 record
Markets served
Stelau Consulting business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Infrastructure
Revenue model
- Cybersecurity Consulting and Advisory Services: Bespoke consulting engagements for RSSI and General Management covering compliance (eIDAS, RGS, ISO 27001, PASSI, CSPN), IAM/SSO architecture, and digital identity strategy. Revenue is project-based and recurring through multi-year qualification and audit accompaniment mandates.
- Security Audits and Evaluations: ANSSI-approved PVID evaluators and LSTI-approved eIDAS/ISO 27001 auditors conducting certification and qualification audits for Trust Service Providers, digital identity products, and government systems. Delivered as professional service engagements with defined scope and timelines.
- SDK and API Licensing (VDS/CEV): Stelau's CEV creation, encoding, and signing API is the only solution deployed in production in France, notably used by the French Ministry of Interior for France Identité CEV issuance. Revenue derived from API usage licensing, SDK integration fees, and per-transaction signing fees, with HSM integration for qualified electronic signatures.
- Secure Software Development: Security-first application and service development engagements, integrating security from design phase. Includes development of specialized components such as the idFod electronic signature solution (SOAP webservices, React admin UI) and mDL/mDoc SDKs.
Go-to-market motion2 records
Distribution channels4 records
Marketing channels4 records
Stelau Consulting product offering
Product offeringCore offering
Stelau Consulting provides cybersecurity consulting, regulatory audit, and secure development services focused on digital identity infrastructure for French and European government agencies and enterprises. The firm also develops and licenses proprietary products including the VDS Verify mobile application for decoding electronic visible seals, the CEV creation API used by the French Ministry of Interior, the mDoc Web Verifier for ISO 18013-5 proximity credential verification, and the mDL/mDoc Reader SDK for Android.
Product overview
Stelau Consulting is an independent cybersecurity and digital identity infrastructure firm founded in 2002, offering a portfolio of products and services centered on digital identity verification, electronic signatures, and cybersecurity auditing. The product portfolio consists of VDS Verify (a mobile app for decoding and verifying CEV/VDS/2D-Doc optical codes), the CEV API (for creating, encoding, signing, and verifying electronic visible seals in production), the mDoc Web Verifier (a PWA for proximity-based ISO 18013-5 credential verification over Web Bluetooth), and the mDL/mDoc Reader Android SDK. These products are complemented by a suite of cybersecurity services including consulting (eIDAS, RGS, IAM, SSO, digital identity, cryptography), audits (ANSSI-approved PVID, eIDAS, ISO 27001, PASSI), and secure development. The company was acquired by iDAKTO in June 2026 to strengthen its position in the European digital identity market.
Differentiator
Problem solved
Functional benefit
Brands
- VDS Verify: Mobile application for decoding and verifying Visible Digital Seals (CEV/VDS/2D-Doc) compliant with 2D-Doc, ISO 22376:2023, and AFNOR XP Z42-105 standards. Interacts with Stelau's API for creation, signing, decoding, and verification of electronic visible seals.
- mDoc Web Verifier
- VDS Verify API
Products and services
- VDS Verify Mobile Application Mobile application (Android and iOS) for decoding and verifying Cachets Électroniques Visibles (CEV), Visible Digital Seals (VDS), and 2D-Doc documents. Scans optical codes (QR/Datamatrix), retrieves certificates from ANTS Trusted List, verifies electronic signatures, and displays decoded data. Used by individuals and organizations to verify identity documents and electronic seals.
- CEV Creation API Backend API for creating, encoding, electronic signing, decoding, and verifying CEV in AFNOR XP Z42-105 and ISO 22376:2023 formats. Supports manifest management, certificate and signing key management, and HSM integration. Licensed to government clients and trust service providers for qualified electronic seal issuance.
- mDoc Web Verifier Web-based proximity reader (PWA) compliant with ISO/IEC 18013-5 for scanning mDoc/mDL device engagement QR codes, connecting via Web Bluetooth BLE, and requesting digital credentials. Supports EU PID, mDL, EU Age Verification, ISO 23220 Photo ID, mICOV, mVC, and FR Student Card. Data is processed locally in the browser with no external server transmission.
- mDL/mDoc Reader SDK (Android) Android SDK implementing ISO/IEC 18013-5 over BLE for proximity reading of mDL/mDoc digital credentials from mobile wallets. Provides high-level APIs for BLE session initialization, device engagement, attribute request, selective disclosure, reader authorization certificates, CBOR/COSE processing, ECDH session encryption, and error/radio quality management.
- Cybersecurity Consulting and Expertise (Conseil et Expertise Cybersécurité) Bespoke cybersecurity consulting engagements covering compliance preparation (eIDAS, RGS, ISO/IEC 27001), certification readiness for services or products, and expertise in IAM, SSO, digital identity, and cryptographic mechanisms. Serves CISOs and General Management at government agencies and enterprises.
- Cybersecurity Audits (Audits de Cybersécurité) Cybersecurity audit services approved by ANSSI as PVID evaluators and by LSTI for eIDAS and ISO/IEC 27001 frameworks. Performs audits against PASSI framework covering electronic certificate delivery, timestamping, archiving, signature validation, electronic registered mail, and electronic identification means.
- Secure Software Development (Développement Sécurisé) Secure application development services integrating security from design phase. Includes development of electronic signature solutions, SDK development, web service implementation, and cryptographic integration for clients requiring security-by-design software delivery.
Quantifiable outcome
- Achieved Qualified TSP status under eIDAS and RGS levels 2 and 3 stars for French QTSP client
- +4 more outcomes
Companies that use Stelau Consulting
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles3 records
Stelau Consulting technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration5 records
AI capability3 records
Feature5 records
Stelau Consulting partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- iDAKTOcoreiDAKTO, a French digital identity company, acquired Stelau to strengthen its position in the European digital identity market and challenge global leaders in EUDI Wallets and digital infrastructure. Post-acquisition, the combined entity covers the entire digital identity value chain (user enrollment, biometrics, digital identity wallets, electronic signatures, security audits) supporting eIDAS 2.0 and EUDI Wallet projects, serving over 10 million active digital identity wallets across Europe, Africa, and the Middle East.
Scale indicators3 records
Recent moves7 records
Expansion highlights5 records
Stelau Consulting competitors and assessment
Company assessmentDirect peers
- Docaposte: Digital trust services arm of La Poste Group, providing qualified electronic signatures, registered electronic mail, and digital identity solutions in France under eIDAS. Directly competes in the French qualified trust service provider market.
- IN Groupe: French state-owned identity solutions provider (formerly Imprimerie Nationale) offering digital identity, secure documents, and trusted services. Operates the France Identité numérique ecosystem and competes for government digital identity contracts.
- InfoCert: Italian qualified trust service provider (part of Tinexta Group) and one of Europe's largest eIDAS-certified trust service providers. Offers digital identity, electronic signatures, and trust services comparable to Stelau's portfolio.
- Namirial: European qualified trust service provider operating across multiple EU countries, offering eIDAS-compliant electronic signatures, digital identity, and trust services. Comparable in scale and regulatory positioning to Stelau's European ambitions.
- iDAKTO: Parent company that acquired Stelau in June 2026. Operates digital identity wallets serving 10M+ users across Europe, Africa, and the Middle East, with overlapping focus on EUDI Wallet, eIDAS trust services, and French government identity programs.
Regional players
- Wavestone: French cybersecurity and digital transformation consultancy competing for similar client engagements in France. Broader in scope than Stelau but a direct competitor for cybersecurity consulting mandates with French government and enterprise clients.
Broad incumbents
- Eviden (Atos): Atos group's cybersecurity, digital identity, and systems integration business. Already a Stelau partner (joint idFod development with ANTS) and a broader competitor for French and EU digital identity consulting and integration work.
- Thales: Global aerospace and defense conglomerate with a large digital identity and security business (formerly Gemalto). Provides eIDAS trust services, digital identity wallets, and PKI infrastructure across Europe at much greater scale than Stelau.
- IDEMIA: Global leader in digital identity and security, providing identity documents, biometric solutions, and digital identity infrastructure. Competes broadly in French and European digital identity markets including government ID programs and EUDI Wallet.
Emerging players
- Cryptovision: European PKI and digital identity specialist now part of Atos/Eviden. Comparable to Stelau in its focus on cryptographic systems, eIDAS solutions, and digital identity infrastructure for European governments.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
Stelau Consulting social profiles
Digital presenceStelau Consulting compliance and trust
Trust signalCompliance10 records
Stelau Consulting financial estimates
Financial estimateRevenue estimate
Valuation estimate
Stelau Consulting leadership team
Management profileNumber of profiles
Profiles7 records
Stelau Consulting funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Stelau Consulting M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Stelau Consulting
What does Stelau Consulting do?
Stelau Consulting provides cybersecurity consulting, regulatory audit, and secure development services focused on digital identity infrastructure for French and European government agencies and enterprises. The firm also develops and licenses proprietary products including the VDS Verify mobile application for decoding electronic visible seals, the CEV creation API used by the French Ministry of Interior, the mDoc Web Verifier for ISO 18013-5 proximity credential verification, and the mDL/mDoc Reader SDK for Android.
Is Stelau Consulting a public or private company?
Stelau Consulting is a private company. It is classified as corporate owned and is currently acquired.
When was Stelau Consulting founded?
Stelau Consulting was founded in 2002. It employs 1 to 10 people.
Where is Stelau Consulting based?
Stelau Consulting is headquartered in Paris, France, in the Europe region.
How does Stelau Consulting make money?
Four revenue lines are on record. Cybersecurity Consulting and Advisory Services are the primary driver. The others are security Audits and Evaluations, SDK and API Licensing (VDS/CEV) and secure Software Development.
Who are Stelau Consulting's main competitors?
Direct peers on record are Docaposte, IN Groupe, InfoCert, Namirial and iDAKTO. Wavestone is listed as a regional player. Broad incumbents are Eviden (Atos), Thales and IDEMIA. Cryptovision is listed as an emerging player.
Does Stelau Consulting have an API?
Yes. Stelau provides a CEV (Cachet Électronique Visible / Visible Digital Seal) API for creation, encoding, electronic signing, decoding, and verification of CEVs in AFNOR and ISO formats. This API is used in production, notably by the French Ministry of Interior for creating CEVs on identity documents (France Identité app) and for face-to-face identity presentation to SNCF. The API supports HSM (Hardware Security Module) integration for secure key generation and electronic signing. Additionally, a public web verifier API is available at mdoc-web-verifier.stelau.com for ISO 18013-5 mDoc/mDL verification over Web Bluetooth proximity.