The CNIL does not wait for complaints. It publishes decisions about specific tools, and French sites are the ones that find out what those decisions mean.
French enforcement has concentrated on analytics, fonts and everything else a page quietly fetches from elsewhere.
Analytics that runs and then respects a preference has already recorded the visit. Measurement is held until a choice is made, which is the distinction French decisions have turned on.
A webfont loaded from another provider sends the visitor's address to that provider on every page view. The platform serves nothing from outside, so the only external calls are ones you chose.
Site, backups and logs sit in the EU and we will say where. French organisations are asked this in procurement more often than anywhere else we operate.
France is geographically small and densely connected. There is no performance reason to accept an origin that turns every uncached request into a long trip.
Processing agreements and subprocessor lists are provided in a form a French legal team can actually file.
France applies the same regulation as its neighbours and applies it harder, with named decisions about named products. A setup that passes elsewhere gets tested here.
Serving France quickly is straightforward. What takes work is a page that does not reach out to anywhere the visitor did not agree to.
Enforcement here focuses on what a page fetches and when it measures, so that is where the configuration goes.
| Setting | What we do | Why |
|---|---|---|
| Measurement timing | Held until a consent choice exists | French decisions have turned on analytics that ran first and honoured a preference afterwards, by which point the visit was already recorded. |
| External asset fetching | Nothing served from outside the site by default | A font or script pulled from another provider transmits the visitor's address to that provider on every view, which is a transfer nobody entered in a register. |
| Storage disclosure | EU location named for site, backups and logs together | French procurement asks this earlier and more precisely than elsewhere, and a network-level answer ends the conversation. |
| Log retention | Windowed rather than open-ended | Keeping request logs indefinitely accumulates personal data for a purpose nobody documented at the time it was collected. |
| Documentation format | Agreements and subprocessor lists supplied for filing | A French legal team needs something to attach to a record, not a summary given over a call. |
Every plan includes free migration, daily backups, SSL and 24/7 support.
Move the site to an EU origin — migration is free, records provided.