Procurement Pack — Hyperion

Everything a procurement or vendor-security reviewer needs in one place, drawn directly from the published legal notice, terms of sale, and privacy policy. Nothing here is new — it is the same facts, assembled for a single printable page.

Company & registration

  • Hyperion Consulting
  • SASU (Simplified Joint Stock Company with a Sole Shareholder)
  • RCS Nanterre
  • SIRET: 948 041 710 00013
  • EU VAT: FR73948041710
  • APE Code: 7022Z (Business and Management Consulting)
  • 126 Avenue du Général Leclerc
  • 92100 Boulogne-Billancourt
  • France

Hosting & data location

  • OVHcloud
  • 2 rue Kellermann, 59100 Roubaix, France
  • Data Centre Location: France (EU)
  • Hosted on ISO 27001 / SOC 1 & SOC 2-certified OVHcloud infrastructure
  • GDPR-aligned data residency in the EU

Insurance & liability

  • Hyperion Consulting maintains professional liability insurance (Responsabilité Civile Professionnelle) covering its consulting activities.
  • Certificate of insurance is available upon request.
  • Hyperion Consulting's total liability for any claims arising from an engagement shall not exceed the total fees paid by the Client for that specific engagement.

Payment terms

  • Unless otherwise specified in the Proposal, payment is due within 30 days of invoice date. Payment shall be made by bank transfer to the account specified on the invoice.
  • Late payments automatically incur interest at a rate of 3x the legal interest rate in France, calculated from the due date
  • A fixed recovery fee of €40 applies to each late payment, without prejudice to additional recovery costs
  • Hyperion Consulting reserves the right to suspend services until outstanding amounts are settled

Security posture

  • Per-request Content-Security-Policy nonce on every page.
  • Primary hosting in the EU (France), via OVHcloud.
  • Cloudflare-only ingress in front of the production server.
  • Automated web-only ban rules for abusive traffic patterns.
  • HTTPS certificates renew automatically; no manual expiry risk.
  • Local secrets are backed up as an encrypted file in off-site Cloudflare R2 storage.
  • Secret scanning runs in CI over every commit range pushed to main, and locally before each commit where the scanner is installed.
  • Automated checks review site copy for factual and stylistic consistency before release.

Data processing

Full data-processing detail — legal basis, retention periods, sub-processors, and international-transfer safeguards — is published in the privacy policy.

5. Data Recipients & Processors

Contact

  • By email: contact@hyperion-consulting.io
  • By mail: Hyperion Consulting, 126 Avenue du Général Leclerc, 92100 Boulogne-Billancourt, France