Services
Eight services, one common thread: compliance
Our core service is preparing Aramco vendors for the CCC certificate. Around it, the same team covers European cyber regulations and builds the tools, automations and AI agents your teams use every day. Every project starts with a free 30-minute call and a fixed quote.
Aramco CCC & CCC+
Aramco requires its vendors to hold a Cybersecurity Compliance Certificate. An Aramco-authorised audit firm issues it only when every applicable control of the Third-Party Cybersecurity Standard SACS-210 (formerly SACS-002) is met. We prepare your company control by control: classification, gap assessment, technical and organisational measures, evidence pack and support during verification.
Read the dedicated pageWhat it includes
- Third-party classification and CCC vs CCC+ scoping
- Control-by-control gap assessment against SACS-210
- Policies written and technical controls actually implemented
- Evidence pack, self-assessment and support until the certificate is issued
The outcome
A complete file, controls that are really in place, and an audit without surprises.
NIS2 & Cyber Resilience Act
NIS2 brings many more companies under cybersecurity obligations. In France the transposition law is still going through Parliament, but ANSSI has published the Référentiel Cyber France (ReCyF) so companies can prepare now. The Cyber Resilience Act already applies to software publishers and makers of connected products: reporting of actively exploited vulnerabilities since September 2026, full requirements and CE marking from December 2027. We work out what applies to you and put the necessary in place.
What it includes
- NIS2 applicability check (essential or important entity)
- Gap assessment and action plan aligned with ReCyF
- CRA: product scope, SBOM and vulnerability handling process
- Incident and vulnerability reporting procedure (24 h / 72 h)
The outcome
You know what applies to you, and you are ready before the deadline.
GDPR & EU AI Act
Regulation is easier to handle when it is mapped to how your company actually works. We review your data flows and AI use cases, identify what applies to you, and turn it into a prioritised action plan your team can follow.
What it includes
- GDPR gap assessment and records of processing
- EU AI Act readiness: system inventory and risk classification
- Data protection impact assessments (DPIA) support
- Privacy-by-design reviews for new tools and features
The outcome
A clear picture of your obligations and a plan you can act on.
Custom internal tools
Spreadsheets and generic SaaS only go so far. We build focused internal applications that match the way your team works, with proper access control, audit trails and clean data from the start.
What it includes
- Lightweight CRMs and client portals
- Back-offices and admin panels
- Operational dashboards and reporting
- Role-based access and activity logs
The outcome
One reliable tool instead of five scattered spreadsheets.
Process automation
Most teams lose hours every week to copy-paste and manual checks. We map the process, remove the steps that do not need a human, and automate the rest with tooling you can understand and maintain.
What it includes
- Workflow mapping and quick-win identification
- Automated document and report generation
- Notifications, reminders and approvals
- Monitoring and error alerts for every flow
The outcome
Fewer manual steps, fewer errors, more time for real work.
AI agents & assistants
AI is useful when it is scoped tightly and measured honestly. We design and build agents for specific jobs, such as triaging requests, drafting answers or extracting data from documents, with logging, review steps and compliance in mind.
What it includes
- Use-case scoping and feasibility checks
- Document processing and data extraction
- Internal assistants connected to your knowledge base
- Human-in-the-loop review and full traceability
The outcome
AI that saves time on real tasks, and that you can explain to an auditor.
Tool integrations
Your tools should talk to each other. We connect the software you already use through their APIs, keep data consistent across systems and document every integration so nothing becomes a black box.
What it includes
- CRM, accounting and invoicing sync
- Email and calendar integrations
- API connections and webhooks
- Data migration and clean-up
The outcome
A single source of truth across your stack.
Maintenance & support
Software is never really finished. After delivery we can keep your tools secure, up to date and evolving with your needs, under a simple monthly arrangement.
What it includes
- Security updates and dependency upgrades
- Monitoring and incident response
- Small feature requests and adjustments
- Documentation kept up to date
The outcome
Tools that keep working long after launch day.
Have a process that should run itself?
Tell us what slows your team down. You will get a clear answer on what can be built, what it involves, and what it costs. No commitment.
contact@vaurely.com