Sovereignty · 12 October 2026
Sovereign cloud: what the April 2026 decision changes for your contracts
The Commission excluded US hyperscalers from its sovereign cloud contract. What that means, concretely, for a French IT department.
Read
Observatory live · five surfaces under watch
Everything your company exposes,
under a single watch.
Your websites, your AI usage, the documents sent to you. Three modules shipped, two in the works, one single discipline: watch continuously, measure the gap, keep the evidence.
Operated in Europe
Signed and timestamped deliverables
No intrusion into your systems
VIGI · LA MEILLEURE BOITE
48°51'N — 2°21'E · EUROPEvigi-app.eu
01The modules
Three available today
One surface, one module. And the same language throughout.
Each module covers one exposed surface and returns the same thing: a score, named gaps, dated actions. What changes is what it looks at.
Available
Continuous vigilance on public websites
Your website is the only part of your company that anyone can audit.
Trackers dropped before consent, a banner that collects nothing, a third party added during a release: all of it can be observed from the outside, without touching your systems. VigiWeb looks first, and warns you.
- 16 control points, a score out of 100
- Continuous watch, not a yearly audit
- Timestamped evidence, enforceable against your providers
Available
Mapping of AI usage
Somewhere in your company, AI is working with your information.
It did not arrive through a project or a committee. It arrived through employees saving time and providers enriching their service. Vigiia keeps the register: four campaigns, signed reports, a charter.
- Executive board, employees, subcontractors, customers
- Anonymous questionnaires, consolidated reporting
- A usage charter written from your own answers
Available
Verification of supporting documents
The documents sent to you were not produced by you.
A care invoice, a till receipt, a certificate, a photo of a damaged item: these documents are produced, altered and uploaded by third parties. And you pay on their appearance alone. VigiProof learns on your own corpus to expose them.
- Alterations, inconsistencies, mismatched metadata
- Reuse detected across the portfolio, not the single case
- Calibrated on your specification, never generic
02Coming
Two surfaces in the works
Two modules under construction.
We announce them because they are coming, not to fill space. They will follow the same mechanics as the first three.
In progress
VigiSign
Your signatures and commitments, verified and timestamped. Who signed, when, on which version of the document, and what proves it.
Coming soon
VigiCyber
Your cyber exposure surface, measured and prioritised. What is visible from the outside, and what to close first.
03The method
Shared by all five modules
Compliance is ticked once a year. Vigilance never stops.
01
Observe
From the outside, continuously, with no access to your systems and no tag to install.
02
Measure
A points-based grid, not an opinion. Two runs give the same score.
03
Name
Each gap maps to a concrete action, not to a general recommendation.
04
Prove
Every finding and every fix is dated. The history is what demonstrates diligence.
04The client area
A single control room
You do not manage tools. You run campaigns.
All your modules in one place
VigiWeb, Vigiia and VigiProof share one account, one invoice and one history. You activate what you need, when you need it.
Campaigns and reminders
Ready-made email sequences, pacing adapted to each audience, response rates tracked live without ever de-anonymising respondents.
Register and deliverables
Every report, every signed declaration, every control scan stays available and downloadable, tied to its date.
One account, three modules, one invoice.
The technical URLs of each module are not public: access goes through your account, with your rights and your audit trail.
05The journal
Regulatory and field watch
What we observe, and what we make of it.
No press releases. Regulatory decisions read closely, and what our scans actually find in the field.
Compliance · 28 September 2026
Trackers dropped before consent remain the most penalised breach
Three years of CNIL decisions, re-read in the light of what we actually observe on French websites.
Read
Document fraud · 9 September 2026
The fake receipt has become a €9 monthly subscription
Receipt generators are sold online, with the right template and the right VAT number. Human checking is out of the game.
Read
06Questions
Before you get in touch
What people ask us
before getting started.
Twelve questions that come up in nearly every first conversation. If yours is not here, write to us.
What is the Vigi suite?
A set of digital-vigilance modules published by LA MEILLEURE BOITE. Each covers one exposed surface of the company — public websites, AI usage, incoming supporting documents — and returns the same thing: a score, named gaps, dated actions, and time-stamped proof that you acted.
Which modules are available today?
Three: VigiWeb for continuous watch over public websites, Vigiia for mapping artificial-intelligence usage, VigiProof for checking supporting documents. VigiSign and VigiCyber are registered trademarks, currently under construction.
Does it require installing anything, or giving you access?
No. VigiWeb observes what your sites expose publicly, from the outside: no tag to install, no access to your servers. Vigiia works through declarative questionnaires sent to your populations. VigiProof analyses the documents you submit to it. No module enters your systems.
How do the modules fit together?
They share one account, one invoice, one history and one grammar: the same score out of 100, the same gap levels, the same evidence format. You can activate just one, then extend. What changes from one module to the next is the surface being watched, never the method.
How much does it cost?
Each module has its own annual price scale, indexed on your headcount and published on that module's page. Regulatory updates are included. Multi-entity groups and white-label distribution: on request.
Where is the data hosted?
On infrastructure located in the European Union, operated under French and European law. No transfer to a third country occurs in normal operation. Reports, signed declarations and evidence remain exportable, and erasable on request.
How is this different from an audit?
An audit is a photograph, taken by a third party, on a given date. The Vigi suite is a watch: it takes the measurement again at regular intervals and dates each gap at the moment it appears. The two complement each other — the audit verifies in depth, the watch warns between audits.
What are the records worth if we are inspected?
They are dated findings, kept and retrievable: what was measured, when, and what was fixed afterwards. That is not a declaration of compliance — no vendor can issue one — but it demonstrates diligence, which is precisely what an inspection weighs.
Does the suite replace our DPO or CISO?
No. It gives them the material they lack: a quantified, dated, reproducible picture instead of an impression. The decision stays with you — it is a company matter, not a tool output.
How do people access the modules?
Through your client area. The modules' technical URLs are not public: access runs through your account, with your permissions, and leaves a record. Each module also lives on its own European domain — vigi-web.eu, vigi-ia.eu, vigi-proof.eu.
When will VigiSign and VigiCyber arrive?
VigiSign — verifying and time-stamping signatures and commitments — is under construction. VigiCyber — measuring the externally visible cyber exposure surface — will follow. We announce them because they are coming, not to fill space: we give no date until we can hold it.
Where should we start?
Usually with the surface most visible from the outside: your public websites. A VigiWeb scan runs with no commitment and gives the order of magnitude in minutes. If your current concern is AI or incoming documents, start with that module — all three are independent.