What My Data Solution does

My Data Solution (MDS) is a French compliance and cybersecurity consulting firm incorporated as a S.A.S. in 2017 and headquartered in Courbevoie (La Défense), with additional offices in Paris, Réunion Island (Piton Saint Leu), and Martinique (Fort de France). The firm specializes in European regulatory compliance — GDPR/RGPD, DORA, NIS2, and the EU AI Act — and provides outsourced Data Protection Officer (DPO), Chief Information Security Officer (RSSI), and Chief Information Officer (DSI) services to a base of 400+ clients across 25+ verticals including healthcare, banking, insurance, public sector, retail, hospitality, and telecom. Its client roster includes APHM, Institut Curie, Alliance Française, Jeff de Bruges, EFS, Zeop, CNDP, and CAIH.

The company operates an integrated services-plus-software model. On the services side it delivers diagnostics, audits, ongoing support, CNIL control preparation, training, and outsourced DPO/RSSI/DSI mandates led by Bureau Veritas- and AFNOR-certified consultants under an obligation-of-result commercial model. On the software side it offers a proprietary suite (Logiciel Registre RGPD, Logiciel Registre IA, Logiciel Cybersécurité/Gestion Consentement, Data Room RGPD) anchored by T-TIME, a proprietary project-tracking tool with a billing algorithm that guarantees no surcharge when budgets are exceeded, and a blockchain-coupled risk management system. Distribution combines direct enterprise sales, an independent consultant network, technology partnerships (Neotiq, SARM Conseil, Stelr, Crisk, Xefi), and partner law firms, supported by content marketing, SEO, webinars, and active community membership (AFCDP, French Tech, CAP DIGITAL, Digital Réunion).

Revenue is generated across five streams — compliance consulting (professional services, time-based), outsourced DPO/RSSI/DSI (managed services), software subscriptions (recurring SaaS), training, and cybersecurity services — with quote-based pricing, a 40% deposit requirement, and Syntec-indexed hourly rates. The firm has approximately 25 employees and a stated turnover of roughly €2 million. Leadership is concentrated in founder/CEO Élodie Royer; no external investors, parent, or subsidiary relationships are disclosed.

Name

My Data Solution

Legal name

My Data Solution

Website

https://mydatasolution.fr

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

My Data Solution is a French compliance consulting firm founded in 2017, delivering GDPR, DORA, NIS2, and AI Act advisory services, outsourced DPO/RSSI/DSI functions, proprietary compliance software, and cybersecurity services to 400+ clients across French and overseas territories.

Ownership category

akta.pro rank

Product category

Data Protection and Compliance Software

NAICS

Software Publishers (513210), Custom Computer Programming Services (541511), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Data Privacy, Consent & Compliance Management (HDAEADAG)

akta.pro secondary industries

Data Strategy & Governance Services (BPAEAHAA), Data Governance Platforms (Policies, Stewardship, Workflows) (HDAEADAB), Ethical Data Sourcing, Consent & Data Provenance (HDAAAMAI), Consent, Preference & Data Rights Management (incl. HIPAA/GDPR support) (HLACAIAG)

Keywords

• Data compliance software
• GDPR consulting services
• Cybersecurity advisory
• Outsourced DPO services
• Regulatory compliance SaaS

Headquarters

HQ city

Courbevoie

HQ country

France

HQ region

Europe

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Compliance Consulting Services: Core revenue stream from regulatory compliance advisory services covering GDPR, DORA, NIS2, and AI Act. Services include audits, diagnostics, support, and training delivered by certified experts (Bureau Veritas, AFNOR).
2. Outsourced DPO/RSSI/DSI Services: Externalization of Data Protection Officer, Chief Information Security Officer, and Chief Information Officer functions. Offers external, on-site (regie), replacement, and shared/mutualized variants.
3. Software Subscriptions: SaaS-based compliance management software including GDPR register, consent management, compliance control center (data room), AI register, and cybersecurity tools. Available via subscription or monthly installments.
4. Training Services: Certifying training programs for GDPR, DORA, NIS2, and AI Act compliance. Targets organizations seeking to develop internal competencies.
5. Cybersecurity Services: Cybersecurity services including GRC (Governance, Risk & Compliance), security audits (ISO, CYBERVADIS), security by design, incident management, and threat/vulnerability management.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels8 records

Core offering

My Data Solution sells a suite of SaaS compliance registries (Registre RGPD, Registre IA, Data Room RGPD, Cybersécurité, T-TIME, KPI Data) that automate GDPR, AI Act, NIS 2, DORA and cybersecurity obligations for organizations. The company complements this software with fee-based outsourced DPO and RSSI services, regulatory consulting, audits, and compliance training delivered to more than 400 clients across 25+ sectors in France and overseas territories.

Product overview

My Data Solution is a compliance services company (certified since 2017) offering a portfolio of proprietary compliance software products integrated with professional consulting services. The product suite includes: (1) Logiciel Registre RGPD for GDPR processing register management, (2) Logiciel Registre IA for AI system documentation, (3) Logiciel Cybersécurité/Gestion Consentement RGPD for consent and security management, and (4) Data Room RGPD for extra-financial data governance. These software tools are complemented by the proprietary T-TIME collaborative tracking platform. The company provides these alongside service offerings including GDPR/DORA/NIS 2/AI Act compliance consulting, outsourced DPO and RSSI services, and professional training programs. The integrated model combines software-driven compliance management with expert consulting support, serving over 400 clients across France and overseas territories.

Differentiator

Problem solved

Functional benefit

Products and services

• Registre RGPD

Quantifiable outcome

• 400+ clients served including major enterprises, public institutions, and PME across 25+ sectors
• +2 more outcomes

Named customers13 records

Segments8 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• NeotiqcoreTechnology or IntegrationStrategic partnership with Neotiq to guarantee state-of-the-art software solutions and digital working environment in terms of technology, cybersecurity, and sovereignty. Neotiq provides IT expertise for GDPR compliance audits on IT security aspects and Data Protection Impact Assessments (AIPD).
• SARM ConseilcoreTechnology or IntegrationPartnership with SARM Conseil to strengthen IT security expertise during diagnostic and compliance audit phases. Provides advanced IT skills for security incidents leading to data breaches.
• Network of Partner Law FirmscoreImplementation/ SI/ Consulting PartnerPartnerships with law firms specializing in national and international law for legal advice, contractual security, pre-litigation and litigation support.
• Maître A.AminorImplementation/ SI/ Consulting PartnerLawyer and GDPR consultant with 6 years experience (sworn in 2015, Paris Bar) providing validation of client contracts and GDPR subcontractor clauses, pre-litigation and pleading support.
• AFCDPminorStrategic or Co-development PartnerActive membership in AFCDP (Association Française des Correspondants à la protection des Données à Caractère Personnel) for professional network and best practices.
• French TechminorStrategic or Co-development PartnerMember of French Tech ecosystem for innovative digital companies, supporting development and international visibility.
• CAP DIGITALminorStrategic or Co-development PartnerMember of Paris region's digital competitiveness cluster for digital transformation and innovation.
• Digital RéunionminorStrategic or Co-development PartnerMember of digital ecosystem cluster in Réunion supporting local digital innovation and networking.
• Bureau Veritas CertificationcoreOthersCertifying body for DPO consultants. MDS consultants obtain Bureau Veritas certification demonstrating professional qualification in data protection (minimum 3 years experience required).

Scale indicators5 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• TrustArc: Established privacy compliance SaaS platform covering GDPR, CCPA, and global privacy programs, competing with MDS's privacy management and register tools in the mid-market and enterprise segments.
• Securiti: AI-powered data security and privacy platform offering consent management, DSR automation, and AI governance, competing with MDS's combined GDPR + AI Act compliance positioning.
• Collibra: Enterprise data intelligence and governance platform whose data cataloging and governance capabilities directly overlap with MDS's Data Room and data governance software positioning.
• Devoteam: European IT consultancy with significant cybersecurity and data protection advisory practices serving large enterprises across France, Benelux, and DACH, overlapping with MDS's compliance and cybersecurity services.
• OneTrust: Global leader in trust intelligence and privacy management software offering a much broader platform (consent, GRC, ethics, ESG) that overlaps with MDS's entire compliance software portfolio.
• BigID: Data intelligence platform for privacy, security, and governance, offering automated data discovery and compliance tools that overlap with MDS's GDPR register and data governance offerings.

Direct peers

• Didomi: French-headquartered consent management and privacy platform that directly competes with MDS's GDPR consent and register SaaS offerings, targeting similar enterprise clients across Europe.

Emerging players

• Commanders Act: European consent management and customer data platform with strong French presence, offering tag management and consent features that overlap with MDS's GDPR consent software suite.
• Dastra: French privacy management SaaS offering GDPR register, consent, and DPO tooling, competing in the same SMB and mid-market French segment as MDS's software products.

Regional players

• Wavestone: French-headquartered consulting firm with a dedicated 'Digital Trust' practice that delivers GDPR, NIS2, and cybersecurity compliance services to large enterprises, directly competing for the same French client base as MDS.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/mydatasolution
• YouTubeyoutube.com/@mydatasolutionmds6397
• Facebookfacebook.com/profile.php?id=61560158162841
• LinkedInlinkedin.com/company/mydatasolution
• Instagraminstagram.com/mydatasolution

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about My Data Solution