Proxad (Free SAS)

France · www.free.fr · 2 vendors

Free S.A.S. is a French telecommunications company and a subsidiary of Iliad SA. It provides voice, video, data, and Internet telecommunications services, including high-speed broadband, IPTV, and mobile telephony, to consumers in France. It is the second-largest Internet service provider in France.

Resilience scores

Technology vendors

Services catalogue

6 services in catalogue across 3 categories; runs on 2 sub-vendors.

Insights

Last updated 2026-07-09 · revision 2

2 direct vendors, 83 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Proxad exhibits good migration readiness, largely driven by its strategic adoption of an internal cloud platform and modern technological components. The use of Scaleway, an Iliad Group Sovereign Cloud Platform, signifies a strong commitment to cloud infrastructure and internal expertise, facilitating potential migrations within their sovereign ecosystem. The tech stack includes modern languages like Go and TypeScript, alongside AI/Machine Learning capabilities, which are conducive to developing and migrating cloud-native applications. The implied low external vendor lock-in for services ('Total Vendors: 0') is a significant advantage, reducing complexity and costs associated with disentangling from third-party contracts during migration. Furthermore, the focus on 'Sovereign Datacenter Infrastructure (XPR Datacenter)' and Scaleway indicates a clear strategy for data residency and compliance, which, while a strength for regulatory adherence, could present constraints if considering migration to non-sovereign global public clouds. Challenges to readiness include the presence of legacy languages like Perl and PHP, which may indicate older, monolithic systems that would require more effort for modernization and migration. There is also a lack of explicit data on containerization or microservices adoption, as well as financial stability to fund large-scale migration initiatives.

Compliance

10 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Proxad (Free SAS) is a major French telecommunications operator headquartered in Paris, France, processing vast volumes of personal data for millions of subscribers (identification data, billing data, traffic data, usage/activity data, profiling data, and cookie/tracker data). As an EU-based company and electronic communications operator, GDPR is unambiguously applicable. The risk level is High because: (1) Free SAS has already been sanctioned by the CNIL — in January 2022, the CNIL fined Free €300,000 for GDPR violations related to insufficient security measures and failure to respect data subject rights; (2) the company processes sensitive categories of data at scale including traffic/location data, financial data, and behavioral profiling; (3) data is shared with third parties in the US and Morocco, requiring Standard Contractual Clauses (SCCs) and adequate transfer mechanisms; (4) the French CNIL is one of the most active EU data protection authorities; (5) maximum GDPR fines can reach €20M or 4% of global annual turnover. The company does publish a privacy policy referencing GDPR rights and a DPO contact (dpo@iliad.fr), indicating partial compliance infrastructure, but past enforcement actions and the complexity of data flows elevate residual risk.

Evidence: https://www.free.fr/freebox/politique-de-confidentialite, https://www.free.fr/freebox/donnees-et-contenus, https://www.free.fr/freebox/rapport-de-transparence, https://www.free.fr/freebox/cookies, https://www.free.fr/freebox/formulaire-rgpd

EU Digital Services Act — Assessment Required

The Digital Services Act (DSA), applicable from February 2024, imposes obligations on intermediary services including hosting providers, online platforms, and search engines. Free SAS provides hosting services (webmail, Free Transfert file sharing, Freebox cloud storage) and operates online platforms (Free TV, content portals). The risk level is Medium because: (1) Free SAS's hosting and platform services likely qualify as 'hosting services' under DSA Article 6; (2) DSA requires notice-and-action mechanisms for illegal content, transparency reporting, and cooperation with authorities; (3) Free SAS already publishes a content reporting mechanism (https://www.free.fr/freebox/signaler-un-abus) and a content management policy, suggesting DSA awareness; (4) if Free SAS's platforms exceed 45 million monthly active users in the EU, Very Large Online Platform (VLOP) obligations would apply; (5) non-compliance can result in fines up to 6% of global annual turnover.

Evidence: https://www.free.fr/freebox/signaler-un-abus, https://www.free.fr/freebox/politique-de-gestion-des-contenus, https://www.free.fr/freebox/rapport-de-transparence

French Consumer Protection Law — Partially Compliant

Free SAS is subject to French consumer protection law administered by the DGCCRF (Direction Générale de la Concurrence, de la Consommation et de la Répression des Fraudes). As a major B2C telecom operator, Free SAS must comply with: contract transparency, right of withdrawal (14-day cooling-off period), billing accuracy, and fair commercial practices. The risk level is Medium because: (1) Free SAS has faced consumer complaints and regulatory scrutiny regarding billing practices and contract terms; (2) the company explicitly offers no-commitment contracts ('sans engagement'), which reduces some consumer protection risk; (3) DGCCRF actively monitors telecom operators; (4) Free SAS provides clear cancellation and withdrawal mechanisms online. 'Partially Compliant' reflects that while the company has strong consumer-facing compliance infrastructure, historical complaints exist.

Evidence: https://www.free.fr/freebox/tarifs-et-conditions, https://www.free.fr/freebox/informations/informations-legales, https://www.free.fr/pdf/cnc_guide_interactif.pdf

Financials

Three-year financials

Financial Resilience Score: 7/10

Iliad Group (parent of Free SAS) demonstrates strong operational resilience, backed by a large recurring subscription revenue base of ~22-23 million subscriber relationships in France and consistent revenue growth at a ~7-9% CAGR over the last 5 years. Group revenue has crossed €9bn and EBITDAaL €3.5bn, with the return to positive net income in 2023 after losses in 2021-2022 signaling improving profitability. Cost leadership as the historical disruptor of the French telecom market, combined with extensive owned infrastructure (>36 million FTTH premises marketable, own mobile network), reduces wholesale reliance and supports margins. However, resilience is tempered by significant leverage taken on to fund the 2021 take-private transaction and international M&A (Play in Poland, Iliad Italia, stakes in Tele2 and BT), with group net debt commonly reported in the €10bn+ range including lease liabilities. Rising interest rates increase debt service costs, while capex intensity remains high (€1.5-2bn in France alone) for fibre and 5G rollout. Private ownership by Xavier Niel provides patience capital and strategic flexibility, but the loss-making history of Italian expansion (only recently at EBITDAaL breakeven) and competitive pricing pressure in a mature French market remain concerns. Overall, the group has scale, diversified geography, and improving profitability, but elevated leverage keeps this from being a top-tier resilience score.

Key strengths: Large recurring subscription revenue base (~22-23M subscriber relationships in France), Consistent revenue growth at ~7-9% CAGR over 5 years, Cost leadership as historical market disruptor, Extensive owned infrastructure (>36M FTTH premises, own mobile network), Return to positive net income in 2023, Private ownership by Xavier Niel providing patient capital, Geographic diversification across France, Poland, Italy, EBITDAaL crossed €3.5bn in 2023

Risk factors: High leverage with net debt €10bn+ including lease liabilities, Rising interest rates increasing cost of debt, Heavy capex intensity for fibre and 5G rollout (€1.5-2bn France), Competitive pricing pressure in mature French market, Regulatory oversight by ARCEP and wholesale price regulation, FX and integration risk on Polish and Italian operations, Loss-making history of Italian expansion, only recently at EBITDAaL breakeven, Potential market consolidation (Bouygues/SFR) could alter competitive dynamics

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report