SECURITY & TRUST

 

At Okeenea Digital, the company behind Evelity, information security and the protection of our users' and customers' data are a priority. This page summarises our commitments and the measures in place.

 

Independent assessment

The maturity of our cybersecurity programme is assessed by CyberVadis. Okeenea Digital achieved the "Mature" level, with the Silver medal (score 894/1000) — assessment valid until 2 June 2027.

Hosting and data protection

  • Data hosted within the European Economic Area (Google Cloud Platform — EU region, and OVH — France).
  • Encryption of data in transit (TLS) and at rest.
  • Strong authentication (MFA), named accounts and least-privilege access.
  • Regular backups and a business continuity and disaster recovery plan (BCP/DRP).
  • Systems monitoring and access logging.

Application security

  • Secure development: code review, OWASP best practices, strict access management.
  • Security audits and testing conducted with specialist providers.
  • Vulnerability monitoring and management.

Privacy and GDPR

  • Data minimisation and pseudonymisation: the application requires no user account; end users are identified by an anonymous identifier.
  • Outsourced DPO (Cabinet Haas Avocats), an up-to-date record of processing activities and a completed data protection impact assessment (DPIA).
  • Sub-processors governed by data processing agreements (DPAs) and, where relevant, standard contractual clauses.
  • Learn more: Privacy Policy.

Report a vulnerability

We welcome security vulnerability reports under a coordinated disclosure approach. Please contact us at security@evelity.com. Kindly allow us a reasonable time to fix the issue before any public disclosure, and do not access, modify or exfiltrate data that does not belong to you. See our Vulnerability Disclosure Policy.

Incident management

In the event of a security incident affecting personal data, we follow a formal procedure and notify the CNIL within the legal 72-hour deadline, together with our DPO.

Contact

Security: security@evelity.com — Data protection: dpo-digital@okeenea.com.

Last updated: 17 July 2026.