Security Hosted in France Daily backups Encrypted traffic Data portability

Security, hosting, availability

The facts, for your IT department,
your procurement team and your data protection officer.

Ask a specific question
Data hosted in France, solution edited in France
What this page covers
Hosting
Backups
Encryption
Internal access
Availability
Disaster recovery
Data portability
as at 20 August 2026
Hosted in FranceServers and data hosted on French soil
Encrypted trafficHTTPS traffic, HSTS policy
Daily backupsOne-month retention
Access limited to what is neededLeast-privilege principle on the Nicoka side
Your data stays yoursExport at any time, never resold to third parties
In summary

A page of facts, not a sales pitch

A recruitment agency handles candidates' personal data and its clients' commercial information. Before signing, an IT department wants short, verifiable answers: where the data is, who can reach it, how often it is backed up, and how to get it back on leaving.

This page gives those answers. For the contractual material, the data processing agreement and detailed technical documentation, our teams send them on request. Commercial terms are set out on the pricing.

  • Hosted in France, with recovery facilities geographically far apart.
  • Daily backup of every server, kept for one month.
  • No resale of data to third parties, at any point.
The detail, point by point

What is in place today

Material provided for information, alongside the contractual documents.

Hosting

Every server is hosted in France, with a French cloud provider. The solution is edited and developed in France, by teams based in Paris and Angers.

  • Servers located in France
  • SaaS solution, no local installation
  • Development and support teams in France

Disaster recovery

If the main production facilities were to become unavailable, geographically distant recovery facilities take over.

  • Separate recovery sites
  • Geographical distance
  • Hosting in France maintained

Backups and retention

Every server is backed up daily, with a one-month retention period.

  • Daily frequency
  • One-month retention
  • Scope: every server

Encrypted traffic

Traffic between your machines and our servers is encrypted. An HSTS policy is applied to prevent protocol downgrade attempts and cookie hijacking.

  • Traffic encrypted end to end in transit
  • HSTS policy active
  • Credentials transmitted encrypted

Access to data

On the Nicoka side, only authorised staff reach the resources their role requires, following the least-privilege principle. On your side, you control rights through access profiles.

  • Least privilege internally
  • Access profiles configurable on the client side
  • SAML single sign-on available

Ownership and portability

Your data belongs to you. It is not resold to third parties, and you can export it at any time, including in a format another provider can reuse. The terms also appear in our frequently asked questions.

  • Spreadsheet export at any time
  • Full export on departure
  • No resale to third parties
The figures

Three reference points, without interpretation

99,8 %

availability

The level of availability we guarantee on access to your space.

1 / day

backup

Every server is backed up each day, with a one-month retention period.

100 %

of the data in France

Hosting on French soil, recovery facilities included.

Frequently asked questions

The questions IT departments ask us

Where is our data hosted?
In France, with a French cloud provider. The disaster recovery facilities are also located in France, at a distance from the main facilities.
How often is the data backed up?
Every day, for every server, with backups kept for one month.
Who at Nicoka can reach our data?
Only authorised staff, and only the resources their role requires, following the least-privilege principle. Access is authenticated and credentials are transmitted encrypted.
Do you sell data to third parties?
No. Your data is neither sold nor passed on to third parties.
What happens if we leave Nicoka?
You can export your data in spreadsheet format at any time. On departure, our teams also produce a full export in a format another provider can reuse.
Can we connect our corporate authentication?
Yes. SAML single sign-on is available, and each user's rights stay governed by the access profiles you define.
Where do we get the contractual documents?
The personal data processing agreement and the detailed technical documentation are sent on request by our teams.

A question from your IT department?

Send us your security questionnaire or your documentation request: our teams answer point by point.

A solution edited in France, with data hosted in France