Net-ng

France · www.net-ng.com · 3 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 3 sub-vendors.

Insights

Last updated 2026-07-30 · revision 6

3 direct vendors, 57 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Net-ng demonstrates a high degree of migration readiness, primarily driven by its modern and flexible technical foundation. The internal tech stack, featuring Python, Service-Oriented Architecture (SOA), DevOps practices (CI/CD), and experience with public cloud platforms (client-choice hosting), indicates a strong capability for re-platforming and re-hosting applications. The use of an open-source, component-oriented Python web framework (Nagare) further enhances flexibility and reduces proprietary vendor lock-in for the core application logic, making it highly portable. Agile/Scrum methodologies also support adaptive project execution during migration. The main challenges to migration readiness stem from regulatory and compliance requirements. The identified gaps in GDPR compliance, along with the lack of visible SOC2 and ISO 27001 certifications, will necessitate significant effort and planning to ensure adherence during and after any migration, especially if moving to new environments or jurisdictions. Data residency requirements, while somewhat mitigated by client-choice hosting, still demand careful consideration, particularly for cross-border data transfers and sector-specific localization needs. Financial stability data is insufficient to assess the company's ability to fund a large-scale migration. Vendor lock-in appears low from a technical perspective due to the open-source and public cloud approach, though the concentration of any existing vendors in France could pose minor logistical challenges for external support during a migration.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

As a French company processing personal data (employee data, customer data, client project data), GDPR compliance is mandatory. High risk due to potential fines up to 4% of annual turnover or €20M. Software development companies handle significant personal data through client projects, employee records, and business operations. Non-compliance could result in severe financial penalties and reputational damage.

Evidence: https://www.net-ng.com/mentions-legales.html

SOC 2 (source) — Assessment Required

As a software development company providing custom applications and platforms, SOC2 compliance may be required by enterprise clients, especially those in regulated industries. Medium risk as it's often a contractual requirement rather than legal mandate, but could impact business opportunities and client trust if not addressed.

ISO 27001 (source) — Assessment Required

Information security management is critical for software development companies handling client data and intellectual property. Medium risk as ISO 27001 certification is often required by enterprise clients and demonstrates security maturity. Lack of certification could limit business opportunities with security-conscious clients.

Evidence: https://www.net-ng.com/offre.html

Financials

Three-year financials

Financial Resilience Score: 5/10

Net-ng is a long-established French private SME founded in 2003, giving it over 20 years of continuous operating history across multiple economic cycles including the 2008 financial crisis and COVID-19. This longevity is a meaningful positive signal for baseline financial durability, as many custom software firms fail within their first decade. The company has demonstrably survived and retained clients across a sustained period, suggesting at minimum adequate cash flow management and operational continuity. The client roster — including Yves Rocher, Carrefour Property, AON, Solocal, and Challancin — represents mid-to-large enterprise organisations with strong creditworthiness. Engagements with such clients typically involve structured contracts, milestone-based payments, and longer relationship durations, which supports revenue predictability relative to pure transactional or SME-focused software firms. High switching costs inherent in bespoke platform development further reinforce revenue retention. However, the complete absence of verifiable financial data — revenue, EBIT, equity, leverage, or headcount — makes any quantitative assessment impossible. The company publishes no financial information publicly, and all French trade register databases were inaccessible during research. This opacity is normal for French private SMEs but materially limits confidence in the resilience score. The project-based revenue model introduces cash flow lumpiness, and potential client concentration risk (a small visible client list) could represent material vulnerability if one or two anchor clients were lost. The score of 5 reflects a balanced position: qualitative indicators (longevity, enterprise clients, niche positioning) are genuinely positive, but the total absence of financial verification prevents a higher rating. The score could move significantly in either direction upon review of actual statutory accounts from Infogreffe or a commercial credit bureau.

Key strengths: Over 20 years of continuous operation since 2003, surviving multiple economic downturns, Enterprise-tier client base including Yves Rocher, Carrefour Property, AON, and Solocal, High client switching costs inherent in bespoke custom software and platform development, Niche positioning in custom digital platform engineering with clear service differentiation, Agile/sprint-based delivery methodology reducing project execution risk, Single Rennes office keeping overhead manageable for an SME

Risk factors: Complete absence of public financial disclosures — revenue, profit, equity, and leverage are entirely unverifiable, Project-based revenue model creates lumpy cash flows tied to project starts and completions, Potential client concentration risk given a relatively small visible client roster, Competitive French tech labour market in Rennes creating wage inflation and attrition risk, SME scale may limit ability to compete for large contracts against major ESN players, Single-country (France) operations with no geographic revenue diversification

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report