generated: '2026-08-17'
method: searched
source: https://www.accenta.ai/politique-de-confidentialite/ + https://www.accenta.ai/mentions-legales/ + effiPilot RGPD notice v2.0 + live probes of the effiPilot platform API
note: >-
  There is no OpenAPI, AsyncAPI or GraphQL document to derive standards conformance from, so every
  entry below is either read from a document Accenta publishes or observed on the wire. Accenta
  publishes a real GDPR/RGPD posture and nothing else: no SOC 2, no ISO 27001, no HDS, no trust
  centre, no security.txt, no bug bounty. Absences are recorded as conforms:false rather than
  omitted, because for this provider the absence is the finding.
standards:
- id: gdpr
  conforms: true
  evidence: >-
    Privacy policy cites European Regulation 2016/679 by name and works through its Article 5
    principles; a named data controller is published (cyril.dubus@accenta.ai). The effiPilot platform
    additionally serves a versioned RGPD notice, "RGPD — collecte et utilisation des donnees
    personnelles" v2.0 dated 2026-06-02, linked from the platform's own anonymous
    /api/method/brandConf response.
  urls:
  - https://www.accenta.ai/politique-de-confidentialite/
  - https://storage.sbg.cloud.ovh.net/v1/AUTH_3d9cbc20c59c4c77a70475ce27cd4ecb/Images%20publiques%20effiPilot/RGPD_Collecte_et_utilisation_donnees_personnelles_v200_20260602.pdf
- id: eu-data-residency
  conforms: true
  evidence: >-
    Privacy policy states the site is hosted by OVH in Roubaix, France; the platform's public
    documents are served from OVH's Strasbourg (SBG) object storage. Both are EU regions.
- id: iso-27001
  conforms: false
  evidence: No ISO 27001 certification is claimed on any public Accenta page; no trust centre exists.
- id: soc2
  conforms: false
  evidence: No SOC 2 report or claim found on any public Accenta page.
- id: hds
  conforms: false
  evidence: Not claimed. Accenta serves buildings and energy, not health data.
- id: oauth2
  conforms: false
  evidence: >-
    No oauth2 surface. /.well-known/oauth-authorization-server and
    /.well-known/oauth-protected-resource return 403 on the platform hosts and 404 on www; the
    platform authenticates with a session cookie (see authentication/accenta-authentication.yml).
- id: oidc
  conforms: false
  evidence: /.well-known/openid-configuration is not served on any accenta.ai host.
- id: rfc9457-problem-details
  conforms: false
  evidence: >-
    Errors are plain vendor JSON ({"message": "..."} and {"message","error","statusCode"}), returned
    as application/json, not application/problem+json. See errors/accenta-error-codes.yml.
- id: rfc9116-security-txt
  conforms: false
  evidence: /.well-known/security.txt returns 404 on www.accenta.ai and 403 on the platform hosts.
- id: rfc8594-sunset-header
  conforms: false
  evidence: No Sunset or Deprecation header observed; no deprecation policy published.
- id: openapi
  conforms: false
  evidence: >-
    No OpenAPI or Swagger document at any of /openapi.json, /openapi.yaml, /swagger.json,
    /v3/api-docs, /api-docs, /api/openapi.json, /api/v3/api-docs on www.accenta.ai,
    app.accenta.ai or demo.accenta.ai. The API is an RPC surface (/api/method/<name>) whose
    reference is behind the customer login.
- id: asyncapi
  conforms: false
  evidence: No event, streaming or webhook surface is documented publicly; no AsyncAPI document found.
- id: mcp
  conforms: false
  evidence: >-
    tools/list POSTed to /mcp on www.accenta.ai, app.accenta.ai and api.accenta.ai returned 404. No
    MCP server is published.
- id: a2a
  conforms: false
  evidence: >-
    /.well-known/agent-card.json and the legacy /.well-known/agent.json miss on every host (404 on
    www, 403 on the platform hosts). No agent card exists.
- id: rest
  conforms: false
  evidence: >-
    The surface is RPC-over-HTTP (/api/method/<methodName>), not resource-oriented REST. Recorded as a
    design fact, not a defect.
certifications_published: []
memberships_and_labels:
- name: French Tech 2030
  source: https://www.accenta.ai/en/
  note: A French state innovation programme label, not a security or data-protection certification.
- name: Finance Innovation
  source: https://www.accenta.ai/en/
- name: Solar Impulse Efficient Solution
  source: http://solarimpulse.com/solutions-explorer/geostorage-by-accenta
  note: A sustainability-solution label for the Geostorage technology.