Ataraxie-IT

What Ataraxie-IT does

Ataraxie-IT is a French SARL headquartered in Colombes (108 Boulevard de Valmy, 92700) that provides GDPR (RGPD) compliance consulting and outsourced Data Protection Officer (DPO externe) services to very small and small-to-medium enterprises (TPE/PME) across France, as well as to liberal professions. Founded in 2016 by Pierre Bouffay — a CEPD-certified DPO with 30 years of IT experience in SME/ETI environments — the firm operates as a single-consultant practice delivering external DPO designation, full GDPR compliance diagnostic and implementation, GDPR register creation and maintenance (Art. 30), website compliance, and adjacent cybersecurity services including awareness training and phishing simulation.

The company's core technology is service-delivery rather than a proprietary platform: Ataraxie-IT uses either a third-party GDPR registry tool or spreadsheet-based templates built on the CNIL model to support client treatment registers. It integrates with Vyte.in for scheduling free 30-minute consultations and maintains an affiliate relationship with Eset for cybersecurity software reselling. Listed on the official cybermalveillance.gouv.fr platform (managed by ANSSI) and recognized as an Activateur FranceNum, the firm derives institutional credibility from French government ecosystems.

The business model is primarily subscription-based, structured around three tiers — Basic (€149/month, ex-VAT, for under 10 employees), Classic (€399/month, 10–49 employees), and Confort (from €599/month, with CNIL DPO designation) — complemented by one-off GDPR diagnostics, ad-hoc coaching hour packs, and commission revenue from Eset referrals. Go-to-market is sales-led and consultative: content marketing (blog, newsletter) drives inbound leads, which are converted via free 30-minute consultations into personalized proposals; services are delivered remotely. Publicly named customers include Ifocop, Add Value, ISTEC, EEMI, and Emuge Franken, with no disclosed revenue, funding, or external investors.

Name

Ataraxie-IT

Legal name

Ataraxie-IT SARL

Website

https://ataraxie-it.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

Ataraxie-IT is a single-consultant French firm providing outsourced DPO and GDPR compliance advisory services to TPE/PME and liberal professions across France, founded in 2016 by CEPD-certified Pierre Bouffay.

Ownership category

akta.pro rank

Product category

GDPR & Data Protection Compliance Consulting

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

akta.pro secondary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• GDPR compliance consulting
• External DPO services
• Data protection advisory
• Cybersecurity consulting
• SME compliance services

Headquarters

HQ city

Colombes

HQ country

France

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure, Others

Revenue model

1. DPO External & GDPR Consulting Services (Subscription): Recurring monthly subscription fees for DPO external services, with three tiered plans (Basic, Classic, Confort) billed monthly or quarterly/annually. Additional ad-hoc coaching hours available as add-on packs.
2. Ad-hoc GDPR Consulting & Diagnostic: One-time diagnostic and compliance assessment engagements, often bundled into the subscription tiers or quoted separately as personalized studies.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

Ataraxie-IT provides outsourced Data Protection Officer (DPO externe) services and GDPR (RGPD) compliance consulting to small and medium enterprises (TPE/PME) in France. Core deliverables include GDPR diagnostic assessments, action plans, implementation support, Article 30 treatment register creation and maintenance, website GDPR compliance, and CNIL interaction management. The firm also offers complementary cybersecurity services (awareness training, phishing simulation, and security solutions) delivered remotely by a CEPD-certified DPO.

Product overview

Ataraxie-IT is a GDPR compliance and cybersecurity consulting firm offering advisory services to small and medium enterprises (TPE/PME). The company provides a portfolio of advisory services centered around three main offerings: External DPO (DPO Externe), GDPR Compliance (Mise en conformité RGPD), and GDPR Register management (Registre RGPD). Additional services include Website GDPR Compliance (Conformité RGPD site Web) and Cybersecurity services (sensitization, phishing simulation, and security solutions). The company operates on a tiered service model with three pricing tiers—Basic, Classic, and Confort—catering to businesses of different sizes from micro-enterprises (<10 employees) to mid-size companies (10-49 employees). Services are delivered by certified DPO Pierre Bouffay, who provides both ad-hoc consulting and ongoing compliance support.

Differentiator

Problem solved

Functional benefit

Products and services

• DPO Externe (External Data Protection Officer) Outsourced Data Protection Officer service providing GDPR compliance oversight, advisory, coaching, and CNIL liaison for organizations without an internal DPO. Includes diagnostic assessment, action planning, implementation support, and ongoing DPO designation.
• Mise en conformité RGPD (GDPR Compliance Implementation) Comprehensive GDPR compliance consulting service including diagnostic assessment, gap analysis, action plan development, and implementation support for organizations seeking full compliance with the General Data Protection Regulation.
• Registre RGPD (GDPR Treatment Register) GDPR Article 30 register management service including creation, maintenance, and ongoing updates using a dedicated GDPR platform or CNIL-compliant spreadsheet templates (Excel), with personalized coaching.
• Conformité RGPD site Web (Website GDPR Compliance) Website-specific GDPR compliance service covering legal requirements (forms, privacy policy), security (HTTPS, certificates), and cookie consent management for website owners.
• Cybersécurité (Cybersecurity Services) Cybersecurity services including security awareness training (sensibilisation à la sécurité), phishing simulation testing, and tailored security solutions for businesses seeking to strengthen their cyber defenses.

Quantifiable outcome

• Reduces GDPR non-compliance risk, including avoidance of fines up to €20 million or 4% of global annual turnover
• +2 more outcomes

Named customers5 records

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature2 records

Partnerships

Three partnerships are on record, tiered minor and core.

• EsetminorGTM or Marketing PartnerEset is a cybersecurity software vendor. Ataraxie-IT acts as an affiliate reseller, promoting Eset antivirus/security products via affiliate links on the website. In return, Ataraxie-IT earns a commission on referred sales (affiliate marketing relationship).
• Cybermalveillance.gouv.frcoreGTM or Marketing PartnerThe official French national cybersecurity platform, managed by the ANSSI and supported by the Ministry of the Interior. Ataraxie-IT is officially referenced on this platform, providing credibility and a government-backed referral channel.
• FranceNumminorGTM or Marketing PartnerFranceNum is a French government initiative supporting digital transformation of SMEs. Ataraxie-IT holds 'Activateur FranceNum' status, indicating official recognition as a digital advisor within the ecosystem.

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Emerging players

• OneTrust: Global privacy management software platform offering consent, DSAR, RoPA, and DPO workflow tools. Increasingly adopted by mid-market EU firms, with automation that may substitute parts of Ataraxie-IT's manual service offering.
• TrustArc: Global privacy compliance platform offering DSAR, consent, and RoPA automation. Comparable as a technology-enabled emerging competitor to traditional DPO service providers like Ataraxie-IT.
• Data Legal Drive: French GDPR compliance SaaS platform automating RGPD diagnostics, register management, and action plans for SMEs. An emerging productized alternative to Ataraxie-IT's manual consulting approach with potential to displace service hours.

Direct peers

• Securys: French data protection and cybersecurity consultancy offering external DPO, GDPR compliance, and CNIL support to SMEs and mid-market clients. Closely comparable to Ataraxie-IT in service model, customer segment, and regulatory specialization.
• Agires: French data protection and IT compliance advisory for SMBs, including RGPD diagnostics, DPO outsourcing, and cybersecurity awareness. Overlapping service portfolio and target market with Ataraxie-IT.
• Pridis: French DPO external services firm providing RGPD diagnostics, ongoing DPO designation, and training to French SMEs. Same target segment (TPE/PME) and similar subscription/consulting mix as Ataraxie-IT.
• DPO Consulting: French consulting firm specialized in outsourced DPO and GDPR compliance for SMEs and liberal professions. Directly comparable in customer profile (TPE/PME, professions libérales) and core DPO external offering.

Broad incumbents

• Devoteam: French-headquartered digital transformation consultancy with a cybersecurity and data protection practice serving mid-market and large enterprises. Overlaps with Ataraxie-IT on GDPR/DPO services at larger scale and different segment.
• Capgemini: Global IT services leader with a data protection and GDPR consulting practice serving enterprise and government clients. Provides competitive pressure in the broader French market, though it does not focus on TPE/PME.
• Sopra Steria: European IT services group with significant French operations and cybersecurity/data protection capabilities. Overlaps on regulatory compliance advisory, primarily serving larger public and private sector clients.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/ataraxie-it

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ataraxie-IT