IN Groupe

France · owned by Agence des participations de l'État (France) · ingroupe.com · 50 vendors

IN Groupe is a global leader in identity and secure digital services, providing state-of-the-art physical and digital identity solutions—including national ID cards, ePassports, PKI infrastructure, and border control systems—to governments, businesses, and citizens worldwide. Originally established as the French national printing authority (Imprimerie Nationale), the company integrates electronic, optical, and biometric technologies to help nations, organizations, and individuals embrace digital transformation securely. It serves clients across Africa, Asia, North America, South America, and Europe.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 50 sub-vendors.

Insights

Last updated 2026-09-15 · revision 47

50 direct vendors, 306 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

IN Groupe exhibits a medium level of migration readiness, characterized by a strong technological foundation but significant regulatory and data residency complexities. The company's internal tech stack is highly modern, featuring "Cloud / SaaS platforms," "PKI-as-a-Service infrastructure," "Agile / Scrum methodology," and advanced technologies like "Blockchain" and "Post-Quantum Cryptography." This indicates a strong capability to adopt cloud-native architectures, containerization, and microservices, which are key enablers for efficient migration. The projected revenue of €1B by 2025 suggests robust financial health, providing the necessary capital to fund substantial migration initiatives. However, the migration process will be significantly challenged by IN Groupe's highly regulated environment and stringent data residency requirements. As a provider of sovereign identity solutions, the company is subject to "data residency requirements on a per-contract basis," particularly for EU-based services under GDPR. This necessitates careful architectural planning to ensure data remains within specified geographic boundaries, potentially limiting the choice of cloud providers or requiring multi-region deployments. The complex regulatory landscape, including "Partially Compliant" GDPR status and "Assessment Required" for NIS2 and PCI DSS, means that any migration must meticulously address these compliance obligations to avoid legal and operational repercussions. The "Total Services: 71" implies a broad operational footprint, and while "Vendor Geographic Diversity: 14 unique countries" suggests a varied vendor ecosystem, the "Vendor Lock-in Risk: Unknown" remains a critical factor. A high degree of lock-in with existing vendors for these numerous services could introduce significant complexity and cost during a migration, requiring careful contract analysis and potential re-negotiation.

Compliance

10 in-scope frameworks identified; showing 3.

French Public Procurement Code — Compliant

As a primary supplier to the French government and other public sector entities, IN Groupe's contracts are governed by the rules and procedures laid out in the French Public Procurement Code.

Non-compliance with public tender rules could lead to exclusion from future government contracts, which form a substantial part of IN Groupe's business. The risk is managed through established legal and compliance functions.

Evidence: https://ingroupe.com/group/, https://procurement.intosairussia.org/en/cases-and-practices-of-regulation-and-auditing-of-public-procurement/france.html, https://www.biometricupdate.com/companies/in-groupe, https://www.pcisecuritystandards.org/standards/, https://www.eff.org/issues/national-ids/france, https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

Regulation — Compliant

IN Groupe is a key manufacturer of the French national electronic identity card, a process explicitly undertaken to comply with this EU regulation aimed at strengthening the security of ID cards across the Union.

Failure to meet the security standards of this regulation would mean the identity cards produced are invalid for travel and official use within the EU, leading to immediate contract termination with member states.

Evidence: https://ingroupe.com/customer-cases/new-french-electronic-identity-card/, https://ingroupe.com/news/new-national-electronic-identity-card/, https://www.europeansources.info/record/regulation-eu-2019-1157-on-strengthening-the-security-of-identity-cards-of-union-citizens-and-of-residence-documents-issued-to-union-citizens-and-their-family-members/, https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32019R1157, https://www.sailpoint.com/identity-library/pci-dss-compliance, https://www.eff.org/issues/national-ids/france

French Law on Biometric Identity Documents — Compliant

IN Groupe is the official manufacturer of French biometric passports and the new national electronic identity card, making it directly subject to all French laws governing the technical specifications, security, and data handling for these documents.

As a long-standing partner of the French state, failure to comply with national laws governing the production of passports and ID cards would result in immediate loss of its primary domestic contracts and severe reputational damage.

Evidence: https://ants.gouv.fr/home/our-missions/documents-produced-by-the-ants/identity-documents/the-chip-in-the-new-national-identity-card, https://www.sailpoint.com/identity-library/pci-dss-compliance, https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard

Financials

Three-year financials

Financial Resilience Score: 8/10

IN Groupe (Imprimerie Nationale S.A.) demonstrates strong financial resilience anchored by its 100% ownership by the French State via the Agence des participations de l'État (APE), which has repeatedly recapitalised the company - most recently with a €65M capital increase in October 2024 bringing share capital to €328.5M. The parent balance sheet is robust with total assets of €988.9M and equity of €591.9M at end-2024, yielding an equity-to-total-assets ratio of ~60%. Operational profitability is solid with FY2024 operating margin of ~20% (€52.1M EBIT on €258.4M revenue) and net income of €62.0M, supported by recurring sovereign contracts with ANTS for biometric passports, vehicle registration (SIV), and European residence permits. However, resilience is tempered by materially rising financial leverage from the transformational Idemia Smart Identity acquisition completed mid-2025 (deal valued up to €1B). Senior debt at parent level totalled €265.5M at end-2024, including a €265M acquisition credit, €78M external-growth credit, plus €30M of Obligations Relances. Financial covenants (leverage ratio: consolidated net financial debt / EBITDA) were tested satisfactorily at 31 December 2024, and €145M notional interest-rate swaps partially mitigate rate risk. Integration risk from the Idemia ISI deal is the single largest execution risk over 2025-2026, alongside €141.1M of tax loss carry-forwards and concentration on French public-sector counterparts.

Key strengths: 100% ownership by French State (APE) providing sovereign backing and recurring recapitalisations (€65M in Oct 2024), Strong parent balance sheet: €988.9M total assets, €591.9M equity (~60% equity ratio) at end-2024, Solid profitability: ~20% operating margin, €62.0M net income in FY2024, Recurring public-sector demand via multi-year ANTS contracts (passports, SIV, residence permits), Financial covenants (leverage ratio) tested satisfactorily at 31 Dec 2024, Growing group scale post-Idemia ISI acquisition: ~€1B consolidated revenue, 4,000 employees, ~130 client countries

Risk factors: Rising leverage from Idemia ISI acquisition: €265.5M senior debt plus €30M Obligations Relances at parent level, Integration and execution risk from Idemia Smart Identity acquisition (deal up to €1B) completed mid-2025, Concentration on French State as principal client counterparty, €141.1M of tax loss carry-forwards indicating historic loss periods, €6.6M provisions for risks and charges including litigation, export-guarantee, contract losses and market penalties, Technology obsolescence risk on ANTS product portfolio (assets amortised over 3-year convention duration), FY2024 revenue declined -7.6% following end of Covid catch-up effect

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report