A real activity, verifiable guarantees
This page gathers the elements that evidence PKM PLUS's activity, insurance coverage and compliance posture — useful to our clients as well as to financial institutions.
Identity & registered activity
PKM PLUS, registered under SIREN number 103453213, carries out the following registered activity:
“Distance selling via specialised catalogue, wholesale, semi-wholesale and retail trade of computer hardware and components, peripherals and software, computer systems and software consulting, computer programming.”
Official registered wording (French, verbatim):
« Vente à distance sur catalogue spécialisé, commerce en gros, semi-gros et au détail de matériel et composant informatique, périphérique et logiciel, conseil en systèmes et logiciels informatiques, programmation informatique. »
Our managed IT, security, cloud management and project services remain strictly within the scope of this activity: supply of computer hardware and software, systems and software consulting, and computer programming.
- Company name: PKM PLUS
- SIREN: 103453213
- Beneficial owner: RIBA Mael Devi Sébastien (President / founder)
Insurance
- Professional liability (RC Pro) — covers damage caused to clients in the course of our services.
- Cyber risk insurance — covers the consequences of a security incident (incident response, business interruption, notification, restoration costs).
Insurance certificates are available on request: contact@pkm-plus.com.
ISO 27001 approach
Our information security management system (ISMS) follows the ISO/IEC 27001 framework. We apply a continuous improvement approach based on:
- a documented security policy reviewed periodically;
- a risk analysis and a treatment plan;
- access controls, entitlement management and logging;
- regular awareness and training of our teams;
- internal audits and management reviews.
GDPR role — processor & DPA
For most of our services, PKM PLUS acts as a processor within the meaning of Article 28 of the GDPR, on behalf of its clients who are data controllers.
Each contract includes a data processing agreement (DPA) defining the instructions, security measures and obligations of each party. We undertake in particular to:
- process the data only on the client's documented instructions;
- guarantee the confidentiality of our authorised staff;
- implement appropriate technical and organisational measures;
- notify any data breach within the required timeframes;
- assist the client in responding to data subjects' requests.
Details are set out in our privacy policy.
Backup & disaster recovery commitments
Our offer includes continuity and recovery commitments, formalised through contractual objectives:
| Commitment | Essential | Advanced | Premium |
|---|---|---|---|
| Recovery point objective (RPO) | 24 h | 4 h | 15 min |
| Recovery time objective (RTO) | 48 h | 24 h | 4 h |
| Restore tests | quarterly | monthly | monthly + report |
| Immutable backup | — | Yes | Yes |
Backups are encrypted, isolated and protected against alteration (immutability). Restore tests are performed and documented to guarantee the effective recoverability of data. Details are set out in our Terms & SLA.
Certifications & partnerships
Our teams are trained and certified on the key technologies we deploy (Microsoft 365, EDR and backup solutions from leading partners). These partnerships allow us to guarantee a level of service and security aligned with market best practices.
Documentation available on request
For due diligence purposes, we provide on request: KBIS extract, articles of association, beneficial owner declaration, insurance certificates (RC Pro and cyber) and client references. Contact: contact@pkm-plus.com.