TRAX Solutions

What TRAX Solutions does

TRAX Solutions is a Paris-based digital compliance agency specializing in cybersecurity through compliance services. Founded in 2015 and headquartered in Levallois-Perret, France, the firm operates with 11-50 employees and primarily serves large enterprises and mid-market companies seeking formal information security certification, with named customers including One2Team (delegated deputy CISO function) and IPLine (ISO 27001 implementation support), as well as unnamed healthcare and enterprise clients pursuing HDS and ISO 27001 certifications. Approximately 40% of engagements address international issues, indicating a primarily French customer base with selective cross-border compliance work.

The company's core technology is vSUITE, a proprietary risk management software that maps information security and enterprise risks to appropriate controls, supporting compliance with ISO 27001, ISO 9001, DORA, NIS2, and HDS standards. vSUITE offers customizable modules — including risk aggregation, multi-dimensional reporting for stakeholders such as CIOs, CISOs, and Risk Managers, and tracking of risk treatment plan progress — alongside vRA and vIC sub-modules. The business model combines subscription-based software licenses for vSUITE with professional services including audit, training (Formation), consulting (Conseil), outsourcing (Externalisation, including delegated CISO functions), and regulatory watch/prospective services (Veille et prospective). Pricing is quote-based and not publicly disclosed, with multi-year engagements typical for the services component.

TRAX distributes through direct enterprise field sales, complemented by content marketing (compliance news and press reviews), professional event participation (including an IHEMI speaking engagement by co-founder François Lorek), and client referrals/testimonials. The firm maintains a content partnership with Cybermalveillance.gouv.fr established in March 2021, and three of its consultants — François Lorek, Eric Jeancolas, and Joris Pegli — received the Cyber-Expert label from GIP ACYMA in 2021, reinforcing credibility in the French cybersecurity ecosystem. The company is privately held with no disclosed external funding, parent company, or institutional backing.

Name

TRAX Solutions

Legal name

TRAX

Website

https://trax.solutions

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

TRAX Solutions is a Paris-based digital compliance agency combining proprietary risk management software (vSUITE) with audit, training, consulting, and outsourced CISO services. It primarily serves French enterprises and mid-market firms seeking ISO 27001, HDS, DORA, and NIS2 certification.

Ownership category

akta.pro rank

Product category

Cybersecurity Compliance Consulting

NAICS

Custom Computer Programming Services (541511), Computer Systems Design and Related Services (54151), Investigation and Security Services (5616)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Services (8741)

akta.pro primary industry

Risk, Controls & Governance (GRC) Platforms (FSAFAOAG)

akta.pro secondary industry

Privacy, Consent & Data Protection Management (BPAEAPAF)

Keywords

• Cybersecurity compliance
• Risk management software
• ISO 27001 certification
• Information security consulting
• GRC services

Headquarters

HQ city

Levallois-perret

HQ country

France

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Services: Audit, training, consulting, outsourcing, and monitoring/prospecting services for digital compliance. Includes ISO 27001 certification support, delegated CISO functions, and HDS certification assistance.
2. Software Licenses (vSUITE): Risk management software solution with customizable modules for organizations to manage and track their risk portfolios over time.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

TRAX Solutions is a digital compliance agency that delivers cybersecurity and information-security risk management through a combination of five professional services—Audit, Training, Consulting, Outsourcing (including delegated CISO), and Regulatory Watch—and vSUITE, a proprietary risk-mapping software that links risks to controls and supports compliance with ISO 27001, ISO 9001, DORA, NIS2, and HDS.

Product overview

TRAX Solutions offers a unified product-service portfolio centered on vSUITE, a risk management software solution that facilitates assessment of information security risks and business risks through linking risks to controls. The portfolio includes five professional services: Audit, Formation (training), Conseil (advisory), Externalisation (outsourcing including CISO delegation), and Veille et prospective (watch and forecasting). vSUITE serves as the core technology platform while the services provide complementary consulting capabilities for implementation, compliance demonstration, and organizational support.

Differentiator

Problem solved

Functional benefit

Brands

• vSUITE: Risk management software solution that facilitates assessment of information security risks and business risks, generating on-demand reports including risk mapping and risk treatment plan monitoring.

Products and services

• vSUITE Proprietary risk management software that assesses information security risks and broader enterprise risks by linking risks to appropriate controls, generating on-demand risk-mapping and treatment-plan reports for compliance with ISO 27001, ISO 9001, DORA, NIS2, and HDS standards. Targets organizations needing structured, multi-stakeholder risk visibility.
• Audit Security audit services that assess compliance posture and identify vulnerabilities in client information systems. Designed for organizations preparing for or maintaining ISO 27001, HDS, and other regulatory certifications.
• Formation (Training) Training services that build organizational and methodological capabilities for risk analysis and compliance demonstration among client teams. Targeted at enterprises seeking to upskill staff on ISO standards and cybersecurity best practices.
• Conseil (Consulting) Advisory services supporting compliance demonstration and the design of organizational compliance strategies. Aimed at executives and compliance officers preparing for certification or responding to regulatory change.
• Externalisation (Outsourcing) Outsourcing services including delegation of the CISO/RSSI function to TRAX experts. Geared toward mid-market and enterprise clients lacking internal cybersecurity leadership capacity.
• Veille et prospective (Watch and Forecasting) Regulatory and technological trend monitoring service that keeps clients informed of evolving cybersecurity, ISO, and European compliance requirements. Designed for organizations needing ongoing horizon-scanning support.

Quantifiable outcome

• Organizations achieve ISO 27001 and HDS certifications with TRAX support

Named customers4 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

One partnership is on record.

• Cybermalveillance.gouv.frcoreStrategic or Co-development Partner · 29 March 2021TRAX maintains a content partnership with Cybermalveillance.gouv.fr, collaborating on cybersecurity awareness content including guides for small businesses on cybersecurity best practices. This partnership reinforces TRAX's position in the French cybersecurity ecosystem.

Scale indicators1 record

Recent moves5 records

Expansion highlights3 records

Direct peers

• Secureframe: Secureframe automates compliance for SOC 2, ISO 27001, HIPAA, and PCI DSS, including audit support. Comparable to TRAX as a compliance automation alternative for organizations seeking ISO certification with less manual consulting involvement.
• Drata: Drata is a continuous compliance and security automation platform targeting ISO 27001, SOC 2, HIPAA, and similar frameworks. It is a direct competitor to TRAX for automated compliance workflows, particularly in the SMB and mid-market segments where TRAX also operates.
• LogicGate: LogicGate offers a no-code GRC platform for risk management, compliance, and policy workflows. Comparable to vSUITE as a customizable risk and controls management solution, with overlapping use cases in enterprise risk mapping and regulatory compliance.
• Vanta: Vanta is a compliance automation platform that helps organizations achieve and maintain ISO 27001, SOC 2, and other certifications through continuous monitoring. It directly competes with TRAX's vSUITE-enabled ISO 27001 certification services, though Vanta leads with software-first automation versus TRAX's services-led approach.

Broad incumbents

• OneTrust: OneTrust is a broad privacy, security, and GRC platform encompassing consent management, vendor risk, and compliance automation. Comparable to TRAX in personal data protection and regulatory compliance, with substantially broader scale and product portfolio.
• ServiceNow GRC: ServiceNow's Integrated Risk Management (IRM) module is a broad enterprise GRC platform covering risk, compliance, audit, and vendor risk. It competes with vSUITE in larger enterprise accounts and offers substantially broader functionality, integration depth, and global delivery.
• RSA Archer: RSA Archer is an established enterprise GRC platform for operational risk, regulatory compliance, and issue management. Comparable to vSUITE in risk and controls management functionality, with deeper enterprise penetration but heavier implementation footprint.
• Bureau Veritas: Bureau Veritas is a global testing, inspection, and certification body that issues ISO 27001 and HDS certifications. Adjacent to TRAX in the certification value chain — TRAX helps clients prepare for certifications that Bureau Veritas (and peers like BSI) ultimately issue.

Regional players

• Wavestone: Wavestone is a French-headquartered IT and management consulting firm with a strong cybersecurity and risk practice. Comparable to TRAX as a France-based cybersecurity advisory competitor for ISO 27001, NIS2, and risk transformation mandates, but at substantially larger scale and broader service portfolio.
• Devoteam: Devoteam is a France-headquartered IT consulting firm with a cybersecurity and cloud risk practice serving enterprise clients across EMEA. Comparable to TRAX as a regional cybersecurity and compliance advisory, with deeper delivery capacity and broader geographic reach.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TRAX Solutions