About · Reunion Island · GMT+4

Who you would be contracting with.

You got here without a referral and without any of the French institutional references that would normally do this work for us. So this page answers what comes before a first email: what Kodetis is, who does the work, how it runs at a distance, and what you keep if it stops.

A cybersecurity practice and a software publisher.

Both, and in that order on the invoice. Kodetis advises organisations on security, and it also builds and sells its own software. The second is what makes the first checkable: you can open a Kodetis product in a browser and judge the work before anyone asks you for a meeting.

Kodetis is a French company based on Reunion Island, a French department and part of the European Union, in the GMT+4 timezone.

Thibaut Fontaine runs it. He answers the first email, writes the proposal, and does the work that follows. His career is on LinkedIn, where dates and employers can be read against something other than this page.

How the work is done.

Three rules of conduct. Each one closes a door that stays open elsewhere, and that is what makes them worth writing down.

  1. Nothing is subcontracted

    The work that is sold is the work that gets done, by the person who sold it. There is no bench behind the proposal and no handover to someone you have not met.

  2. The scope stops at four areas

    DevSecOps, security project management, AI security, and delegated CISO. Outside those four you would be paying for a learning curve, so what you get instead is the name of someone who already does it.

  3. Deliverables are written in French or English

    Your choice, settled at the start of the engagement rather than negotiated once the first document lands.

What you keep if it stops.

Four conditions, each of which can be checked before signing rather than discovered afterwards.

  1. Deliverables land in your repository from day one

    Not at the end, not on request. What exists at any point in the engagement is already in your hands, in the state it is in.

  2. Open formats only

    No proprietary viewer, no licence to renew in order to reopen a document you have already paid for.

  3. No hosting you depend on us for

    Nothing that matters to you runs on infrastructure that has to keep being paid for after the engagement ends.

  4. Exit conditions are written into the contract

    Before it starts, while both sides still have every reason to be reasonable about it. This is easier to design at the beginning than to arrange at the end.

One example, because it can be verified without asking us. Éclat archives in the MLA format, an open archive format published and documented by ANSSI, France national cybersecurity agency. The specification is public, so an archive stays readable whether or not Kodetis is still around to open it.

The contractual frame

A French entity, French law, invoicing in euros.

Engagements run under French law. Invoices are issued in euros, under EU VAT rules, by a company registered in France. For an organisation in Mauritius, Madagascar, the Seychelles or the Comoros, that is a European contract without leaving the region.

The working day is GMT+4: the same one as Mauritius and the Seychelles, an hour from Madagascar and the Comoros, and a usable overlap running from the Gulf across Asia to Australia.

What we publish, and what we are still working on.

Éclat is a zero-knowledge file and message transfer service. The server never holds the content or the keys. It is in service, the price list is public, and it opens in a browser without an account.

ATLAS-AI and SAINE are research, published as they go rather than announced once finished. The lab notes carry a date, which is the only honest way to say that something is still alive.

The Éclat page The research work

How we are vetted.

Two public programmes list Kodetis. In both cases a public body checked before listing, which is the only part that matters here.

  • European Digital Innovation Hub

    Kodetis is a referenced provider under the European EDIH programme, carried on Reunion Island by Cyber Réunion, which publishes the map of listed providers.

    cyber-reunion.fr

  • MonAideCyber

    Kodetis is a referenced aidant under MonAideCyber, a scheme run by ANSSI, France's national cybersecurity agency. The register of aidants is public.

    monaide.cyber.gouv.fr

Who these two programmes are for

Both address organisations established on Reunion Island and in the European Union. If yours sits outside that perimeter, neither applies to you and neither is being offered to you here. They are written on this page as evidence that a public third party has looked at Kodetis, and for nothing else.

Held outside the practice.

Thibaut Fontaine teaches applied cybersecurity in French higher education, to computing and engineering students. Teaching forces you to state plainly what you believe you have mastered, which is the hardest test available.

Kodetis belongs to CLUSIR Océan Indien, the regional chapter of the French information security association network, and contributes to its public awareness work. That is membership of an ecosystem, not a credential, and it is written here as one.

Send us one thing. We'll review it.

Take something you already own: a pipeline definition, an architecture diagram, an LLM or MCP integration, or the vendor security questionnaire you are stuck on. What comes back is a written note in the format of a real deliverable. If it turns out we are not the right people, you get told that instead of a proposal shaped to fit.

Write to us

contact(@)kodetis(.)com