Dattak: Difference between revisions
Created page with "== Corporate profile and regulatory identifiers == 🏢 '''Legal identity.''' Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary headquartered at 65 Boulevard Lannes, 75016 Paris, France.<ref name="dattak-legal">{{cite web |title=Mentions légales |url=https://www.dattak.io/fr/legal |publisher=Dattak |access-date=9 March 2026}}</ref> The company is registered under SIREN 907 857 817 with the Paris trade and companies regis..." |
No edit summary |
||
| Line 1: | Line 1: | ||
{{Infobox company |
|||
== Corporate profile and regulatory identifiers == |
|||
| name = Dattak |
|||
| legal_name = Dattak S.A.S. |
|||
| logo = Logo of Dattak.svg |
|||
| logo_size = |
|||
| logo_alt = Dattak logo |
|||
| logo_caption = |
|||
| type = Private — insurtech wholesale broker |
|||
| exchange = |
|||
| ticker = |
|||
| isin = |
|||
| lei = |
|||
| license_type = Insurance intermediary (courtier) — ORIAS No. 22002872 |
|||
| npn = |
|||
| coverholder_ref = |
|||
| incorporation = France |
|||
| founded = {{Start date and age|2021|12|01}} |
|||
| headquarter = Paris, France |
|||
| domicile = France |
|||
| insurance_jurisdictions = France<br/>Luxembourg<br/>Belgium |
|||
| regulator = Autorité de Contrôle Prudentiel et de Résolution (ACPR) |
|||
| ultimate_parent = |
|||
| shareholders = XAnge<br/>Breega<br/>Bpifrance<br/>Founders and business angels |
|||
| key_people = Charlotte Couallier, co-founder and CEO<br/>Damien Damamme, co-founder and CTO<br/>Benoît Grouchko, co-founder |
|||
| num_employees = 25 (August 2023) |
|||
| customer_segments = SMEs to upper mid-market companies (up to €2bn revenue) |
|||
| lines_of_business = Cyber insurance<br/>Professional liability (RC Pro) |
|||
| segments = |
|||
| products = Cyber insurance<br/>Combined Cyber + RC Pro<br/>Standalone RC Pro<br/>MDR bundle (EDR + managed SOC) |
|||
| technology_platform = Dattak Défense (risk management platform)<br/>Scan Cyber (attack surface monitoring)<br/>CERT-DATTAK (incident response) |
|||
| capacity_providers = Wakam<br/>Sompo<br/>SCOR<br/>Hannover Re<br/>Chaucer<br/>Hamilton<br/>Envelop Risk |
|||
| distribution = Broker network with digital quoting and binding platform |
|||
| geographic_markets = France<br/>Luxembourg<br/>Belgium |
|||
| num_customers = approximately 1,000 companies (August 2023) |
|||
| competitors = At-Bay<br/>Stoïk<br/>Coalition<br/>Cowbell<br/>Corvus Insurance<br/>Eye Security |
|||
| market_share_rank = |
|||
| financial_year = |
|||
| market_cap = |
|||
| revenue = |
|||
| insurance_revenue = |
|||
| operating_income = |
|||
| ebitda = |
|||
| net_income = |
|||
| gwp = €10M (2024, company-reported) |
|||
| nwp = |
|||
| loss_ratio = |
|||
| combined_ratio = |
|||
| commission_rate = |
|||
| total_assets = |
|||
| invested_assets = |
|||
| technical_reserves = |
|||
| csm = |
|||
| net_debt = |
|||
| equity = |
|||
| operating_margin = |
|||
| solvency_ratio = |
|||
| roe = |
|||
| total_funding = €18M |
|||
| last_round = Series A, €11M, August 2023 |
|||
| last_valuation = |
|||
| lead_investors = XAnge<br/>Breega<br/>Bpifrance |
|||
| capital_structure = |
|||
| ifsr = |
|||
| capacity_partner_ratings = |
|||
| ratings = |
|||
| footnotes = GWP figure is company-reported and unverified by independent audit. |
|||
}} |
|||
{{Summary:Dattak|5}} |
|||
{{More details}} |
|||
{{Section separator}} |
|||
== Corporate profile == |
|||
🏢 '''Legal identity.''' Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary |
🏢 '''Legal identity.''' Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary registered under SIREN 907 857 817 with the Paris trade and companies register (RCS Paris).<ref name="legal">{{cite web |title=Mentions légales |url=https://www.dattak.io/fr/legal |publisher=Dattak |access-date=2026-03-09}}</ref> The registered office is located at 65 Boulevard Lannes, 75016 Paris, with an additional operational address at 21 Rue du Général Foy, 75008 Paris, which serves as the CERT contact address and appears across site footers.<ref name="cert">{{cite web |title=CERT-DATTAK |url=https://www.dattak.io/fr/cert |publisher=Dattak |access-date=2026-03-09}}</ref> The company was created on 1 December 2021 per France's official business directory.<ref name="annuaire_dattak">{{cite web |title=Dattak — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-dattak-907857817 |publisher=Annuaire des Entreprises (INSEE) |access-date=2026-03-09}}</ref> |
||
📋 '''Regulatory status.''' Dattak is registered with ORIAS under No. 22002872 as a wholesale broker (courtier grossiste) in commercial property and casualty insurance for businesses, operating under the French Insurance Code and the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR).<ref name="legal"/> The firm holds professional liability insurance and a financial guarantee with CGPA under policy identifiers RCP77920 and GFI77920, and states it has no equity links with insurance companies or mutual insurers.<ref name="legal"/> |
|||
📅 '''Founding.''' The French official business directory (INSEE-backed) records the company creation date as 1 December 2021.<ref name="annuaire-dattak">{{cite web |title=Dattak — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-dattak-907857817 |publisher=Annuaire des Entreprises |access-date=9 March 2026}}</ref> Investor communications consistently describe the business as founded in late 2021.<ref name="bpifrance">{{cite web |title=Dattak lève 11M€ en Série A |url=https://presse.bpifrance.fr/dattak-leve-11meur-en-serie-a-et-affirme-ses-grandes-ambitions-pour-offrir-la-meilleure-protection-de-cyber-assurance-et-cyber-securite/ |publisher=Bpifrance |date=August 2023 |access-date=9 March 2026}}</ref> Dattak is privately held. |
|||
🏗️ '''Group structure.''' A distinct technology subsidiary, Dattak Technologies (SIREN 944 430 719), was incorporated in 2025.<ref name="annuaire_tech">{{cite web |title=Dattak Technologies — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-technologies-944430719 |publisher=Annuaire des Entreprises (INSEE) |access-date=2026-03-09}}</ref> CERT-DATTAK operates as part of Dattak Technologies and is described as a subsidiary of the Dattak company in formal RFC 2350 documentation.<ref name="rfc2350">{{cite web |title=CERT-DATTAK RFC 2350 v1.2 |url=https://content.dattak.io/hubfs/CERT-DATTAK_RFC2350_EN_v1.2.pdf |publisher=Dattak Technologies |date=September 2025 |access-date=2026-03-09}}</ref> |
|||
⚖️ '''Regulated status.''' Dattak positions itself as a wholesale broker ("courtier grossiste") in commercial property and casualty insurance for businesses, operating under the French Insurance Code.<ref name="dattak-legal"/> It is registered with ORIAS under No. 22002872 and operates under the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR).<ref name="dattak-legal"/> The firm holds professional liability insurance and a financial guarantee with CGPA, under policy identifiers RCP77920 (professional liability) and GFI77920 (financial guarantee).<ref name="dattak-legal"/> Dattak discloses no equity links with insurance companies or mutual insurers.<ref name="dattak-legal"/> |
|||
🌍 '''Cross-border presence.''' A Croatian financial supervisor (HANFA) notification register includes an entry for Dattak with ACPR listed as supervisory authority and registration number 22002872, with a notification date of 18 June 2024, consistent with EEA freedom-to-provide-services registration.<ref name="hanfa">{{cite web |title=Notifikacije zastupnika i posrednika iz država članica EU |url=https://www.hanfa.hr/media/wgtasgrg/notifikacije-zastupnika-i-posrednika-iz-dr%C5%BEava-%C4%8Dlanica-eu-a.pdf |publisher=HANFA |access-date=2026-03-09}}</ref> |
|||
🏗️ '''Group structure.''' A distinct technology subsidiary, Dattak Technologies (SIREN 944 430 719), was incorporated in 2025.<ref name="annuaire-tech">{{cite web |title=Dattak Technologies — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-technologies-944430719 |publisher=Annuaire des Entreprises |access-date=9 March 2026}}</ref> CERT-DATTAK's RFC 2350 documentation describes this subsidiary as part of the Dattak group.<ref name="cert-rfc2350">{{cite web |title=CERT-DATTAK RFC 2350 v1.2 |url=https://content.dattak.io/hubfs/CERT-DATTAK_RFC2350_EN_v1.2.pdf |publisher=Dattak Technologies |date=September 2025 |access-date=9 March 2026}}</ref> |
|||
🌍 '''Cross-border notifications.''' A Croatian financial supervisor (HANFA) register includes an entry for Dattak showing ACPR as the supervisory authority and registration number 22002872, with a notification date of 18 June 2024, consistent with EEA freedom-to-provide-services intermediary notification registers.<ref name="hanfa">{{cite web |title=Notifikacije zastupnika i posrednika iz država članica EU-a |url=https://www.hanfa.hr/media/wgtasgrg/notifikacije-zastupnika-i-posrednika-iz-dr%C5%BEava-%C4%8Dlanica-eu-a.pdf |publisher=HANFA |access-date=9 March 2026}}</ref> |
|||
🔑 '''Intermediary classification.''' France does not use a formal "MGA license" label in the manner of certain other jurisdictions; Dattak's disclosed authorisation is its ORIAS registration as a wholesale broker.<ref name="dattak-legal"/> The firm describes itself as a broker and underwriting agency and is presented in all primary materials as an intermediary rather than a licensed risk-bearing insurer.<ref name="dattak-legal"/> |
|||
{{Section separator}} |
{{Section separator}} |
||
== Leadership == |
|||
== Founders, leadership, and governance == |
|||
👩💼 '''Charlotte Couallier''' is co-founder and CEO (PDG).<ref name="bpifrance"/> A graduate of Télécom Paris, she received a "femme cyber 2022" trophy at Campus Cyber.<ref name="dattak-femme-cyber">{{cite web |title=Femme Cyber — Trophée Cefcys |url=https://www.dattak.io/fr/blog/femme-cyber-trophee-cefcys-telecom-paris-campus-cyber |publisher=Dattak |date=October 2022 |access-date=9 March 2026}}</ref> Before founding Dattak, Couallier worked as an actuary and first employee at Leocare, followed by a role as director of commercial partnerships at AXA France.<ref name="dattak-seed-pr">{{cite web |title=Communiqué de presse — Dattak lève 7M€ |url=https://www.dattak.io/blog/communique-de-presse-assurtech-dattak-leve-7-million-d-euros-xange-business-angel-cyber |publisher=Dattak |date=June 2022 |access-date=9 March 2026}}</ref> |
|||
👨💻 '''Damien Damamme''' is co-founder and CTO and is identified as the publication director in Dattak's legal notices.<ref name="dattak-legal"/> Investor press materials describe him as formerly responsible for "lab distribution" at Allianz.<ref name="bpifrance"/> |
|||
👩💼 '''Founders.''' Dattak was co-founded by Charlotte Couallier, Damien Damamme, and Benoît Grouchko.<ref name="bpifrance">{{cite web |title=Dattak lève 11M€ en Série A |url=https://presse.bpifrance.fr/dattak-leve-11meur-en-serie-a-et-affirme-ses-grandes-ambitions-pour-offrir-la-meilleure-protection-de-cyber-assurance-et-cyber-securite/ |publisher=Bpifrance |date=August 2023 |access-date=2026-03-09}}</ref> Couallier serves as CEO (PDG) and is a graduate of Télécom Paris who received the "femme cyber 2022" trophy at Campus Cyber.<ref name="femme_cyber">{{cite web |title=Femme cyber — Trophée Cefcys |url=https://www.dattak.io/fr/blog/femme-cyber-trophee-cefcys-telecom-paris-campus-cyber |publisher=Dattak |date=October 2022 |access-date=2026-03-09}}</ref> Her prior experience includes roles as an actuary, first employee at Leocare, and former director of commercial partnerships at AXA France.<ref name="seed_pr">{{cite web |title=Communiqué de presse — Dattak lève 7 millions d'euros |url=https://www.dattak.io/blog/communique-de-presse-assurtech-dattak-leve-7-million-d-euros-xange-business-angel-cyber |publisher=Dattak |date=June 2022 |access-date=2026-03-09}}</ref> |
|||
🚀 '''Benoît Grouchko''' is the third co-founder, described as a serial entrepreneur who founded Teemo and sold it to Near in 2020.<ref name="dattak-seed-pr"/> Following the Series A round, a management transition saw Couallier assume the CEO/PDG title while Grouchko remained a shareholder supporting strategy and advisory missions.<ref name="bpifrance"/> |
|||
🔧 '''Technical and strategic leadership.''' Damamme serves as CTO and is identified as the publication director in Dattak's legal notices; his background includes a role as head of lab distribution at Allianz.<ref name="legal"/><ref name="bpifrance"/> Grouchko is a serial entrepreneur who previously founded Teemo (sold to Near in 2020) and, following a management transition at the Series A stage, remained a shareholder supporting strategy and advisory missions while Couallier assumed the CEO role.<ref name="seed_pr"/><ref name="bpifrance"/> |
|||
👥 '''Leadership team and board.''' Dattak's leadership group includes Alexia Morot as Head of Cyber Insurance, alongside other functional leaders reporting to the CEO and CTO.<ref name="dattak-legal"/><ref name="dattak-seed-pr"/> Board-level participation includes Matthieu Bébéar, identified as former Chief Business Officer of AXA, and Alexis du Peloux.<ref name="bpifrance"/><ref name="dattak-seed-blog">{{cite web |title=Seed — Dattak lève 7M€ en cybersécurité |url=https://www.dattak.io/blog/seed-cybersecurite-dattak-leve-7-millions-d-euros-assurance-tpe-pme |publisher=Dattak |date=June 2022 |access-date=9 March 2026}}</ref><ref name="newsassurances-grosses-pme">{{cite web |title=Cyber : Dattak s'ouvre aux grosses PME |url=https://www.newsassurancespro.com/cyber-dattak-souvre-aux-grosses-pme/01691557190 |publisher=News Assurances Pro |date=June 2023 |access-date=9 March 2026}}</ref> No AXA Group corporate venture arm investment or AXA capacity-provider relationship is disclosed in primary materials; however, both Couallier (prior employment) and Bébéar (angel investor with executive history) carry AXA connections.<ref name="dattak-seed-pr"/> |
|||
🧭 '''Board and additional leadership.''' Dattak discloses board-level participation by Matthieu Bébéar (identified as ex-Chief Business Officer of AXA in seed communications) and Alexis du Peloux.<ref name="seed_blog">{{cite web |title=Seed — Dattak lève 7 millions d'euros |url=https://www.dattak.io/blog/seed-cybersecurite-dattak-leve-7-millions-d-euros-assurance-tpe-pme |publisher=Dattak |date=June 2022 |access-date=2026-03-09}}</ref><ref name="legal"/> The leadership team also includes Alexia Morot as Head of Cyber Insurance, and Augustin Brunelle as director for Nord Est and BeLux expansion.<ref name="legal"/><ref name="belgium">{{cite web |title=Dattak s'implante en Belgique |url=https://www.dattak.io/fr/blog/dattak-implantation-belgique-assurance-cyber |publisher=Dattak |date=July 2025 |access-date=2026-03-09}}</ref> |
|||
{{Section separator}} |
{{Section separator}} |
||
== Funding |
== Funding == |
||
💰 '''Seed round.''' Dattak raised €7M in a seed round in June 2022 led by XAnge, with participation from business angels including Matthieu Bébéar.<ref name="seed_pr"/> The round accompanied a stated partnership with Wakam to carry insurance risk and the launch of a broker-first digital subscription process.<ref name="seed_pr"/> |
|||
{| class="wikitable sortable" style="width:100%; font-size:0.85em" |
|||
|+ 💰 Dattak S.A.S. — funding rounds (EUR millions)<ref name="bpifrance"/><ref name="dattak-seed-pr"/> |
|||
! scope="col" style="text-align:center" | Round |
|||
! scope="col" style="text-align:center" | Date announced |
|||
! scope="col" style="text-align:center; width:7em" | Amount raised |
|||
! scope="col" style="text-align:center" | Lead investor |
|||
! scope="col" style="text-align:center" | Notable co-investors |
|||
! scope="col" style="text-align:center; width:7em" | Cumulative funding |
|||
|- |
|||
| Seed || Jun 2022 || style="text-align:right" | €7M || XAnge || Business angels incl. Matthieu Bébéar || style="text-align:right" | €7M |
|||
|- |
|||
| Series A || Aug 2023 || style="text-align:right" | €11M || XAnge || Breega; Bpifrance || style="text-align:right" | €18M |
|||
|} |
|||
📈 '''Series A.''' In August 2023, Dattak raised €11M in a Series A led by XAnge with Breega and Bpifrance as co-investors, bringing cumulative funding to €18M.<ref name="bpifrance"/> Stated use of proceeds included doubling team size, expanding cybersecurity tooling, adapting the offer to larger firms (ETI), improving partner broker experience, and targeting more than €10M in business volume the following year.<ref name="bpifrance"/> |
|||
🏦 '''Investor |
🏦 '''Investor composition.''' The investor base combines early-stage venture capital (XAnge, Breega) and state-backed venture (Bpifrance). No insurer corporate venture fund investment is disclosed; however, Bébéar participates as a business angel with prior AXA executive history.<ref name="bpifrance"/><ref name="seed_pr"/> |
||
{{Section separator}} |
{{Section separator}} |
||
== |
== Business model and distribution == |
||
🔄 '''Operating model.''' Dattak functions as a cyber-focused insurtech intermediary combining delegated placement in a broker/MGA-like model with bundled cybersecurity services and incident response capacity.<ref name="legal"/><ref name="cyberattack">{{cite web |title=Cyberattack — Prévention et services |url=https://www.dattak.io/fr/cyberattack |publisher=Dattak |access-date=2026-03-09}}</ref> The firm distributes exclusively through a network of partner brokers supported by an online platform that enables quoting in approximately one minute via a fully digital process.<ref name="seed_pr"/><ref name="bpifrance"/> |
|||
📊 '''Segment evolution.''' Dattak's disclosed client segmentation has expanded materially over time, measured by client revenue thresholds. Initial positioning targeted micro and small enterprises (TPE/PME), progressing to companies with €75M to €200M in revenue by June 2023, then up to €500M by February 2024.<ref name="seed_pr"/><ref name="newsassurances_pme">{{cite web |title=Cyber : Dattak s'ouvre aux grosses PME |url=https://www.newsassurancespro.com/cyber-dattak-souvre-aux-grosses-pme/01691557190 |publisher=News Assurances Pro |date=June 2023 |access-date=2026-03-09}}</ref><ref name="capacites">{{cite web |title=Dattak multiplie ses capacités |url=https://www.dattak.io/fr/blog/multiplie-capacites |publisher=Dattak |date=February 2024 |access-date=2026-03-09}}</ref> A September 2024 partnership with Sompo expanded coverage to firms with up to €1bn in revenue, and current homepage claims extend the ceiling to €2bn.<ref name="sompo">{{cite web |title=Cyber carrier Dattak teams with Sompo to cover large French firms |url=https://www.commercialriskonline.com/cyber-carrier-dattak-teams-with-sompo-to-cover-large-french-firms/ |publisher=Commercial Risk Online |date=September 2024 |access-date=2026-03-09}}</ref><ref name="homepage">{{cite web |title=Dattak — Accueil |url=https://www.dattak.io/ |publisher=Dattak |access-date=2026-03-09}}</ref> |
|||
🗺️ '''Geographic expansion.''' France is Dattak's home market, with Paris as the registered office. The company expanded to Luxembourg followed by Belgium, where it names a dedicated BeLux expansion lead.<ref name="belgium"/> An EEA notification register entry (Croatia, HANFA) corroborates cross-border intermediary notification under the ACPR.<ref name="hanfa"/> |
|||
🏥 '''Vertical diversity.''' A June 2023 interview describes a diversified portfolio spanning healthcare, industry, services, education, and local authorities, and states the MGA has very few underwriting prohibitions.<ref name="newsassurances-grosses-pme"/> Hard quantitative portfolio breakdown by revenue band or vertical is not publicly available. Investor press materials from August 2023 cite a portfolio of approximately 1,000 French companies, consistent with a volume-driven broker distribution model.<ref name="bpifrance"/> |
|||
📋 '''Vertical mix.''' A June 2023 interview describes a diversified portfolio spanning healthcare, industry, services, education, and local authorities, with "very few" underwriting prohibitions.<ref name="newsassurances_pme"/> |
|||
🗺️ '''Geographic footprint.''' France is the home market, with the registered office in Paris.<ref name="dattak-legal"/> Dattak subsequently expanded to Luxembourg, followed by Belgium, where Belgian companies already use the offering and a BeLux expansion lead has been named.<ref name="dattak-belgique"/> An entry on the Croatian HANFA notification list provides additional corroboration of EEA intermediary notification activity.<ref name="hanfa"/> |
|||
{{Section separator}} |
{{Section separator}} |
||
== Cyber insurance |
== Cyber insurance coverage == |
||
🛡️ '''Underwriting triggers.''' Dattak's cyber insurance covers multiple event types including malicious intrusion, human error, malicious employee actions, internal programming errors, and IT outage due to internal defects (as an optional module), with email fraud also available as an option.<ref name="insurance">{{cite web |title=Assurance cyber |url=https://www.dattak.io/fr/insurance |publisher=Dattak |access-date=2026-03-09}}</ref> The contract was explicitly expanded to cover major IT outages and IT provider failures — including scenarios analogous to the 2024 CrowdStrike incident — when they occur unexpectedly and disrupt operations, even absent a malicious attack.<ref name="panne">{{cite web |title=Panne informatique et assurance cyber |url=https://www.dattak.io/fr/blog/dattak-blog-panne-informatique-assurance-cyber |publisher=Dattak |date=November 2025 |access-date=2026-03-09}}</ref> |
|||
💼 '''First-party coverages.''' The policy provides business interruption coverage, system restoration and data reconstruction costs, replacement of irrecoverably damaged hardware (bricking), notification costs for personal data breaches (authority and impacted-party notification), and monitoring costs to detect misuse of leaked personal data.<ref name="insurance"/> Additional first-party elements include payment card losses and associated fines, telecom overbilling and cloud cost spikes (optional), and software replacement with improved versions following a cyberattack.<ref name="insurance"/> |
|||
* Notification costs for personal data theft (authority and impacted-party notifications) |
|||
* Monitoring and surveillance costs for leaked personal data |
|||
* Payment card losses including banking costs and legally due fines after a confidentiality breach |
|||
* Telecom overbilling and cloud cost spikes (optional) |
|||
* Software and application improvement costs following cyberattack impacts<ref name="dattak-insurance"/> |
|||
🔐 '''Ransomware and fraud.''' Dattak's product includes ransomware ransom payment coverage, positioned as a last-resort measure, with clarity on ransom payment cited as a product attribute.<ref name="ransomware">{{cite web |title=Insurtech cyber : le paiement des rançons n'effraie pas Dattak |url=https://www.newsassurancespro.com/insurtech-cyber-le-paiement-des-rancons-neffraie-pas-dattak/01691503085 |publisher=News Assurances Pro |access-date=2026-03-09}}</ref><ref name="newsassurances_pme"/> Cyberfraude coverage addresses financial loss from fraud following proven malicious intrusion, including fraudulent transfer requests, while email fraud coverage (with and without intrusion) is available as a module.<ref name="insurance"/> |
|||
🤝 '''Third-party coverages.''' The policy provides cyber liability and media liability protection, including defence costs in connection with third-party claims arising from disclosure of confidential or compromising information.<ref name="dattak-insurance"/> Regulatory defence and investigation costs are covered for proceedings initiated by competent authorities following personal data violations or PCI DSS security breaches, including CNIL investigations.<ref name="dattak-insurance"/> |
|||
⚖️ '''Third-party and regulatory coverages.''' Third-party liability protection encompasses cyber liability and media liability, including defense costs in connection with claims following disclosure of confidential or compromising information.<ref name="insurance"/> Coverage also extends to costs of investigations and administrative sanctions initiated by authorities following personal data violations or PCI DSS security rule breaches, including defense costs in regulatory proceedings.<ref name="insurance"/> |
|||
🆘 '''Embedded breach response.''' Dattak operates an internal CERT model with a 24/7 hotline, an average intervention time of under two minutes, and assistance without deductible, sublimit, or prerequisite validation — including for false positives.<ref name="dattak-cert"/> The CERT coordinates technical response, legal support, crisis communications, and indemnification, relying on a network of specialised partners for complex cases while maintaining centralised control.<ref name="dattak-cert"/> The CERT RFC 2350 document (v1.2, published 10 September 2025) details services spanning incident analysis, forensics, remediation, crisis management, vulnerability and malware analysis, and proactive activities such as vulnerability scanning, Active Directory assessment, cloud configuration assessment, penetration testing, and cybersecurity training.<ref name="cert-rfc2350"/> |
|||
🚨 '''Embedded incident response.''' Dattak operates CERT-DATTAK, an internal 24/7 incident response function with an average intervention time of under two minutes. Assistance is provided without deductible, without sublimit, and without prerequisite validation, including for false positives.<ref name="cert"/> The CERT coordinates technical response, legal support, crisis communications, and indemnification, relying on a network of specialized partners for complex cases while maintaining centralized control through its internal team.<ref name="cert"/> |
|||
{{Section separator}} |
|||
== Cybersecurity services and technology stack == |
|||
{{Section separator}} |
|||
🔍 '''Pre-bind and preventive tooling.''' Dattak markets a prevention platform exclusively for its insureds, comprising several tools: Dattak Défense (a risk management platform for evaluating and controlling cyber risk), Scan Cyber (continuous surveillance of information systems with analysis reports and remediation guidance), a free advanced cybersecurity audit with corrective action mapping, a phishing campaign simulator for employee conditioning, and penetration testing.<ref name="dattak-cyberattack"/> |
|||
== Cybersecurity services == |
|||
🔍 '''Prevention platform.''' Dattak markets a suite of prevention tools positioned as exclusive to its insureds, branded as Dattak Défense.<ref name="cyberattack"/> This includes Scan Cyber for continuous surveillance of insureds' information systems with analysis reports and remediation guidance, a free advanced cybersecurity audit with corrective action mapping, a phishing campaign simulator for employee conditioning, and penetration testing services.<ref name="cyberattack"/> |
|||
🖥️ '''In-force and post-incident services.''' During the policy term, CERT-DATTAK provides ongoing proactive activities including vulnerability scanning, Active Directory and cloud assessments, and cybersecurity training for its customer community under contract.<ref name="cert-rfc2350"/> The CERT also functions as an always-on post-incident response capability, coordinating technical response and crisis handling.<ref name="dattak-cert"/> |
|||
📡 '''CERT service catalog.''' The CERT RFC 2350 document (v1.2, published September 2025) describes services spanning incident analysis and forensics, incident response support and remediation, crisis management, vulnerability and malware analysis, and proactive activities such as vulnerability scanning, Active Directory assessment, cloud configuration assessment, penetration testing, and cybersecurity training.<ref name="rfc2350"/> |
|||
🛡️ '''MDR offering.''' Dattak markets a Managed Detection and Response (MDR) package bundling insurance with EDR and a managed SOC, claiming average premium reductions of 30 percent for insureds using this formula, along with simplified eligibility including subscription without a cybersecurity questionnaire.<ref name="dattak-cyberattack"/> Several cybersecurity tools are framed as included for all Dattak insureds, while MDR is presented as a distinct bundled tier tied to premium discounting, implying an upsell structure rather than universal inclusion.<ref name="dattak-cyberattack"/> |
|||
🤖 '''MDR offering.''' Dattak markets an MDR (Managed Detection and Response) bundle combining insurance with EDR and a managed SOC, claiming average premium reductions of 30 percent for insureds using the formula and simplified eligibility including subscription without a cybersecurity questionnaire.<ref name="cyberattack"/> The MDR offering is presented as a distinct bundled tier tied to premium discounting rather than a feature included in all policies.<ref name="cyberattack"/> |
|||
⚙️ '''Technology stack.''' Dattak states that its cyber scan is developed internally and characterises CERT as an in-house team, while also acknowledging reliance on a network of specialised partners for complex cases.<ref name="dattak-cyberattack"/> Specific third-party technology vendors for MDR, EDR, SOC, and telemetry are not publicly identified. |
|||
{{Section separator}} |
{{Section separator}} |
||
== Partnerships |
== Partnerships and capacity == |
||
🏛️ '''Capacity providers.''' Dattak's initial risk carrier was Wakam, established |
🏛️ '''Capacity providers.''' Dattak's initial risk carrier was Wakam, established at the seed stage.<ref name="seed_pr"/> The carrier and reinsurer panel has since expanded to include Sompo, SCOR, Hannover Re, Chaucer, Hamilton, and Envelop Risk.<ref name="carriers">{{cite web |title=Dattak carrier and reinsurer panel |url=https://res.cloudinary.com/dattak/image/upload/v1728918907/Group_520_608738b1c2.png |publisher=Dattak |access-date=2026-03-09}}</ref> Per-risk capacity grew from €2M in June 2023 to €5M per company by February 2024, supported by Wakam, SCOR, and Envelop Risk among others.<ref name="newsassurances_pme"/><ref name="capacites"/> |
||
🎖️ '''Defense-sector partnership.''' Dattak partnered with the Direction générale de l'armement (DGA) to integrate the DGA cyber maturity framework (RMC) for the Defense Industrial and Technological Base (BITD), collaborating with ANSSI on the foundational level. The initiative is positioned as impacting roughly 4,000 French SMEs, enabling compliant firms to subscribe directly to Dattak's cyber insurance.<ref name="dga">{{cite web |title=Dattak s'associe à la Direction générale de l'armement |url=https://www.dattak.io/fr/blog/dattak-associe-direction-generale-armement |publisher=Dattak |date=March 2024 |access-date=2026-03-09}}</ref> |
|||
📄 '''Product expansion |
📄 '''Product expansion.''' Dattak expanded beyond cyber into professional liability for the tech and services sector, offering a combined Cyber + RC Pro integrated contract and a standalone RC Pro product.<ref name="rcpro">{{cite web |title=Dattak Cyber + RC Pro Tech |url=https://www.dattak.io/fr/blog/dattak-cyber-rc-pro-tech |publisher=Dattak |date=June 2025 |access-date=2026-03-09}}</ref> The combined offer features mutualized ceilings up to €10M for RC Pro and €5M for cyber, simplified underwriting without questionnaire up to €50M revenue, coverage for IT outages even without a cyberattack, an included attack surface scan, and an optional USA/Canada extension.<ref name="rcpro"/> |
||
{{Section separator}} |
{{Section separator}} |
||
== Scale |
== Scale and performance == |
||
{| class="wikitable sortable" style="width:100%; font-size:0.85em" |
{| class="wikitable sortable" style="width:100%; font-size:0.85em" |
||
|+ 📊 Dattak — key performance indicators, cumulative and annual, various periods, as disclosed |
|||
|+ 📊 Dattak S.A.S. — disclosed key performance indicators<ref name="dattak-interview">{{cite web |title=Interview Charlotte Couallier |url=https://www.dattak.io/fr/blog/dattak-interview-charlotte-couallier |publisher=Dattak |access-date=9 March 2026}}</ref><ref name="bpifrance"/><ref name="dattak-capacites"/> |
|||
! scope="col" style="text-align:center" | KPI |
! scope="col" style="text-align:center" | KPI |
||
! scope="col" style="text-align: |
! scope="col" style="text-align:right; width:8em" | Most recent figure |
||
! scope="col" style="text-align: |
! scope="col" style="text-align:right; width:8em" | Prior datapoint |
||
! scope="col" style="text-align:center; width:6em" | Source |
|||
|- |
|- |
||
| Premiums placed |
|||
| Premiums placed || style="text-align:right" | €10M (2024) || style="text-align:right" | — |
|||
| style="text-align:right" | €10M (FY24) |
|||
| style="text-align:right" | — |
|||
| <ref name="interview">{{cite web |title=Interview Charlotte Couallier |url=https://www.dattak.io/fr/blog/dattak-interview-charlotte-couallier |publisher=Dattak |access-date=2026-03-09}}</ref> |
|||
|- |
|- |
||
| Premiums placed target |
| Premiums placed target |
||
| style="text-align:right" | €22M (end-2025) |
|||
| style="text-align:right" | — |
|||
| <ref name="interview"/> |
|||
|- |
|- |
||
| Policyholders / clients |
| Policyholders / clients |
||
| style="text-align:right" | ~1,000 companies |
|||
| style="text-align:right" | 600+ (Jun 2023) |
|||
| <ref name="bpifrance"/><ref name="newsassurances_pme"/> |
|||
|- |
|- |
||
| Headcount |
|||
| Headcount || style="text-align:right" | 25 (Aug 2023) || style="text-align:right" | — |
|||
| style="text-align:right" | 25 (Aug 2023) |
|||
| style="text-align:right" | — |
|||
| <ref name="bpifrance"/> |
|||
|- |
|- |
||
| Max per-risk capacity |
|||
| Max per-risk capacity || style="text-align:right" | €5M per company || style="text-align:right" | €2M (Jun 2023) |
|||
| style="text-align:right" | €5M per company |
|||
| style="text-align:right" | €2M (Jun 2023) |
|||
| <ref name="capacites"/><ref name="newsassurances_pme"/> |
|||
|- |
|||
| Loss ratio |
|||
| style="text-align:right" | — |
|||
| style="text-align:right" | — |
|||
| — |
|||
|- |
|||
| Revenue |
|||
| style="text-align:right" | — |
|||
| style="text-align:right" | — |
|||
| — |
|||
|- |
|||
| Net income / net loss |
|||
| style="text-align:right" | — |
|||
| style="text-align:right" | — |
|||
| — |
|||
|- |
|||
| MGA commission rate |
|||
| style="text-align:right" | — |
|||
| style="text-align:right" | — |
|||
| — |
|||
|} |
|} |
||
📝 '''Data |
📝 '''Data note.''' The €10M and €22M premium figures are presented by Dattak as part of its own blog summary of a third-party interview not directly accessible at time of review and should be treated as company-reported until independently corroborated.<ref name="interview"/> |
||
{{Section separator}} |
{{Section separator}} |
||
== Competitive positioning == |
== Competitive positioning == |
||
🏆 '''Disclosed differentiators.''' |
🏆 '''Disclosed differentiators.''' Dattak's competitive positioning rests on four primary pillars: an integrated incident response capability anchored by CERT-DATTAK with rapid engagement and formal RFC 2350 documentation; bundled prevention and cyber tooling (attack surface monitoring, phishing simulation, audits) marketed as exclusive to insureds; a capacity architecture designed for progressive scaling into larger-company segments; and adjacency expansion into professional liability for tech and services via a combined Cyber + RC Pro contract.<ref name="cert"/><ref name="cyberattack"/><ref name="rcpro"/> |
||
🔎 '''Peer context.''' Dattak operates within a broader cyber insurtech MGA ecosystem alongside peers such as At-Bay, Baobab Insurance, BOXX Insurance, Coalition, Cogitanda, Converge Insurance, Corvus Insurance, Cowbell, Elpha Secure, Emergence Insurance, Evolve MGA, Eye Security, Invision Cyber, Measured Analytics and Insurance, Onda, Pera, Resilience, SafeInside Insurance, Stoïk, and Sync Underwriting.<ref name="seed_pr"/><ref name="cyberattack"/> |
|||
{{Section separator}} |
{{Section separator}} |
||
== Risk factors == |
== Risk factors == |
||
⚠️ '''Capacity dependency.''' Dattak's model is fundamentally |
⚠️ '''Capacity dependency.''' Dattak's model is fundamentally reliant on continued delegated capacity from its carrier and reinsurance panel. While multiple partners are displayed, specific binding authority terms, renewal corridors, and performance triggers are not publicly disclosed.<ref name="carriers"/> |
||
🌐 '''Systemic exposure.''' Expansion into larger-company segments and explicit coverage of business interruption, IT outages, and provider failures increases correlation risk under systemic cyber events, particularly if reinsurance protections and accumulation controls are not proportionally scaled.<ref name="panne"/> |
|||
💣 '''Ransomware governance.''' Ransom payment coverage is publicly marketed, but the absence of disclosed wording constraints, sanctions screening mechanisms, and sublimits in public materials presents a governance transparency gap.<ref name="ransomware"/> |
|||
📜 '''Regulatory |
📜 '''Regulatory risk.''' As a broker and underwriting agency under ACPR supervision and ORIAS registration, any tightening of intermediary conduct, disclosure, or delegated authority oversight requirements could impact economics and distribution channel friction.<ref name="legal"/> |
||
✈️ ''' |
✈️ '''Expansion execution.''' Geographic expansion into Belgium and Luxembourg introduces cross-border execution risk in distribution onboarding, claims servicing, and local market competition. Moving into professional liability changes claim patterns, tail risk profiles, and staffing requirements, particularly at the €10M RC Pro limit marketed.<ref name="belgium"/><ref name="rcpro"/> |
||
📑 '''Product expansion risk.''' Moving into professional liability changes claim patterns, tail risk profile, and staffing requirements for underwriting and claims expertise, particularly at RC Pro limits of up to €10M.<ref name="dattak-rc-pro"/> |
|||
{{Section separator}} |
{{Section separator}} |
||
== Strategic |
== Strategic outlook == |
||
🚀 '''Growth ambitions.''' Dattak's strategic trajectory centers on building a European leadership position in cyber insurance combined with cybersecurity tooling, continuing to scale through broker distribution with fast digital subscription and embedded services.<ref name="bpifrance"/><ref name="seed_pr"/> |
|||
📐 '''Segment and product expansion.''' The roadmap includes further expansion into larger client segments via increased capacity and higher revenue ceilings, alongside diversification of the product set into liability and financial lines for tech and services through the RC Pro and combined offerings.<ref name="rcpro"/><ref name="newsassurances_pme"/> |
|||
❓ '''Open diligence questions.''' Key undisclosed areas include the full binding authority structure (carriers, syndicates, reinsurers, quota share versus excess of loss, aggregate limits, corridor triggers, cancellation and non-renewal rights); loss performance metrics (frequency, severity, net loss ratio, ransomware claim rate, claims cycle time); ransom governance procedures (sanctions screening, OFAC/EU compliance workflows, negotiation vendors, last-resort criteria in actual wording);<ref name="newsassurances-rancons"/> local intermediary registrations and fronting arrangements for Luxembourg and Belgium;<ref name="dattak-belgique"/> and the separation of economics between MGA commission and cybersecurity services margin.<ref name="dattak-carrier-logos"/> |
|||
{{Section separator}} |
{{Section separator}} |
||
| Line 149: | Line 228: | ||
{| class="wikitable sortable" style="width:100%; font-size:0.85em" |
{| class="wikitable sortable" style="width:100%; font-size:0.85em" |
||
|+ 📅 Dattak |
|+ 📅 Dattak — timeline of key corporate and product events, December 2021 to November 2025 |
||
! scope="col" style="text-align:center; width:7em" | Date |
! scope="col" style="text-align:center; width:7em" | Date |
||
! scope="col" style="text-align:center" | Event |
! scope="col" style="text-align:center" | Event |
||
|- |
|- |
||
| December 2021 |
|||
| 1 Dec 2021 || Company creation date in the official French registry.<ref name="annuaire-dattak"/> |
|||
| Company creation registered in the French official business directory.<ref name="annuaire_dattak"/> |
|||
|- |
|- |
||
| June 2022 |
|||
| Jun 2022 || Seed round of €7M led by XAnge; business angels including Bébéar; partnership with Wakam to carry risk; launch of broker-first digital process.<ref name="dattak-seed-pr"/> |
|||
| Seed round of €7M led by XAnge; business angels including Bébéar; partnership with Wakam to carry risk; broker-first digital process launched.<ref name="seed_pr"/> |
|||
|- |
|- |
||
| October 2022 |
|||
| Oct 2022 || Couallier described as Télécom Paris graduate; receives "femme cyber 2022" trophy at Campus Cyber.<ref name="dattak-femme-cyber"/> |
|||
| Couallier recognized with "femme cyber 2022" trophy at Campus Cyber.<ref name="femme_cyber"/> |
|||
|- |
|- |
||
| June 2023 |
|||
| Jun 2023 || Move up-market to €75M–€200M revenue clients; max capacity increased to €2M; over 600 clients claimed.<ref name="newsassurances-grosses-pme"/> |
|||
| Up-market move to €75M–€200M revenue clients; max capacity increased to €2M; 600+ clients claimed.<ref name="newsassurances_pme"/> |
|||
|- |
|- |
||
| August 2023 |
|||
| Aug 2023 || Series A of €11M; total funding reaches €18M; team of 25; approximately 1,000 clients claimed; Couallier becomes CEO/PDG.<ref name="bpifrance"/> |
|||
| Series A of €11M; cumulative funding reaches €18M; team at 25 employees; approximately 1,000 clients; Couallier becomes CEO/PDG.<ref name="bpifrance"/> |
|||
|- |
|- |
||
| February 2024 |
|||
| Feb 2024 || Capacity expanded to €5M per company; target companies up to €500M revenue; partners cited include Wakam, SCOR, and Envelop.<ref name="dattak-capacites"/> |
|||
| Capacity expanded to €5M per company; target companies up to €500M revenue; partners cited include Wakam, SCOR, and Envelop Risk.<ref name="capacites"/> |
|||
|- |
|- |
||
| March 2024 |
|||
| Mar 2024 || Partnership with DGA and adoption of RMC framework (with ANSSI collaboration); BITD scope and direct subscription claim.<ref name="dattak-dga"/> |
|||
| Partnership with Direction générale de l'armement and adoption of RMC framework with ANSSI collaboration; BITD scope and direct subscription claim.<ref name="dga"/> |
|||
|- |
|- |
||
| September 2024 |
|||
| Sep 2024 || Sompo partnership expands coverage to companies up to €1bn revenue.<ref name="commercialrisk-sompo"/> |
|||
| Sompo partnership expands coverage to companies with up to €1bn revenue.<ref name="sompo"/> |
|||
|- |
|- |
||
| June 2025 |
|||
| Jun 2025 || Launch of combined Cyber + RC Pro offer for tech; disclosed limits and underwriting simplification thresholds.<ref name="dattak-rc-pro"/> |
|||
| Launch of combined Cyber + RC Pro offer for tech sector; disclosed limits and underwriting simplification thresholds.<ref name="rcpro"/> |
|||
|- |
|- |
||
| July 2025 |
|||
| Jul 2025 || Belgium expansion announced; BeLux expansion lead named.<ref name="dattak-belgique"/> |
|||
| Belgium expansion announced; BeLux expansion lead named.<ref name="belgium"/> |
|||
|- |
|- |
||
| September 2025 |
|||
| Sep 2025 || CERT RFC 2350 document v1.2 published.<ref name="cert-rfc2350"/> |
|||
| CERT RFC 2350 document v1.2 published.<ref name="rfc2350"/> |
|||
|- |
|- |
||
| November 2025 |
|||
| Nov 2025 || IT outage and provider failure coverage explicitly framed as included.<ref name="dattak-panne"/> |
|||
| IT outage and provider failure coverage explicitly framed as included in the cyber contract.<ref name="panne"/> |
|||
|} |
|} |
||
{{Section separator}} |
|||
== See also == |
|||
* [[Cyber insurtech MGAs and underwriting agencies]] |
|||
{{Section separator}} |
{{Section separator}} |
||
Latest revision as of 14:24, 9 March 2026
🏢 Dattak is a French cyber-focused insurtech wholesale broker (Société par Actions Simplifiée, SIREN 907 857 817) founded on 1 December 2021 and registered with the Paris trade and companies register. Headquartered at 65 Boulevard Lannes, 75016 Paris, the company holds ORIAS registration No. 22002872 as a courtier grossiste in commercial property and casualty insurance under the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR). A subsidiary, Dattak Technologies (incorporated 2025), houses the CERT-DATTAK incident response function.
👩💼 Leadership. Co-founded by Charlotte Couallier (CEO, Télécom Paris graduate, former AXA France partnerships director), Damien Damamme (CTO, formerly Allianz lab distribution), and Benoît Grouchko (serial entrepreneur, founder of Teemo sold to Near in 2020), Dattak's leadership includes Alexia Morot as Head of Cyber Insurance and board-level participation from Matthieu Bébéar (ex-AXA Chief Business Officer) and Alexis du Peloux. Augustin Brunelle leads the BeLux geographic expansion effort.
💰 Funding. Dattak raised a cumulative €18M in venture capital: a €7M seed round in June 2022 led by XAnge with business angels including Bébéar, followed by an €11M Series A in August 2023 with XAnge, Breega, and Bpifrance. The investor base combines early-stage venture and state-backed capital with no disclosed insurer corporate venture fund participation.
🔄 Business model. Dattak operates as a cyber-focused intermediary combining delegated placement through a broker network with bundled cybersecurity services and incident response. Distribution is exclusively broker-mediated via an online platform enabling quoting in approximately one minute through a fully digital process. The firm's client segmentation has expanded from micro and small enterprises at launch to companies with up to €2bn in revenue, with per-risk capacity growing from €2M to €5M per company.
🛡️ Cyber insurance. The core cyber product covers malicious intrusion, human error, ransomware (payment positioned as last resort), business interruption, IT outages including provider failures, social engineering fraud, bricking, data restoration, personal data breach notification, and payment card losses. Third-party coverages include cyber and media liability with defense costs and regulatory investigation and PCI DSS breach coverage. The contract was explicitly expanded to address major IT outages and provider failures even absent a malicious attack.
🔍 Cybersecurity services. Dattak Défense is a proprietary prevention platform marketed as exclusive to insureds, providing continuous attack surface scanning (Scan Cyber), advanced cybersecurity audits, phishing simulation, and penetration testing. An MDR bundle combining EDR with a managed SOC claims average premium reductions of 30 percent and simplified eligibility. The CERT RFC 2350 document describes services including incident forensics, crisis management, vulnerability scanning, Active Directory and cloud configuration assessments, and cybersecurity training.
🏛️ Capacity and partnerships. The carrier and reinsurer panel comprises Wakam (initial partner), Sompo, SCOR, Hannover Re, Chaucer, Hamilton, and Envelop Risk. Dattak partnered with the Direction générale de l'armement to integrate the DGA cyber maturity framework for the Defense Industrial and Technological Base, impacting an estimated 4,000 French SMEs. Product expansion beyond cyber includes a combined Cyber + RC Pro contract with mutualized ceilings up to €10M for RC Pro and €5M for cyber, simplified underwriting up to €50M revenue, and an optional USA/Canada extension.
📊 Scale indicators. Dattak reported €10M in premiums placed in 2024 (company-reported) with a €22M target by end-2025, approximately 1,000 policyholders as of August 2023 (up from 600+ in June 2023), and 25 employees at the Series A stage. Per-risk capacity reached €5M per company by February 2024. Loss ratio, revenue, net income, and MGA commission rate are not publicly disclosed.
⚠️ Risk factors. Capacity dependency and renewal risk are central given the delegated-authority business model, with binding authority terms and performance triggers not publicly disclosed. Expansion into larger-company segments and IT outage coverage increases systemic correlation risk, while ransomware payment coverage lacks disclosed governance controls and sanctions screening mechanisms. Geographic expansion to Belgium and Luxembourg introduces cross-border execution risk, and the move into professional liability changes claim patterns and tail risk profiles.
🚀 Strategic trajectory. Dattak's stated ambition is to build a European leadership position combining cyber insurance with cybersecurity tooling, scaling through broker distribution with embedded digital services. The roadmap encompasses further expansion into larger client segments, geographic reach across the EEA, and product diversification into professional liability and financial lines for the tech and services sector.
The following sections provide further details.
Corporate profile
🏢 Legal identity. Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary registered under SIREN 907 857 817 with the Paris trade and companies register (RCS Paris).[1] The registered office is located at 65 Boulevard Lannes, 75016 Paris, with an additional operational address at 21 Rue du Général Foy, 75008 Paris, which serves as the CERT contact address and appears across site footers.[2] The company was created on 1 December 2021 per France's official business directory.[3]
📋 Regulatory status. Dattak is registered with ORIAS under No. 22002872 as a wholesale broker (courtier grossiste) in commercial property and casualty insurance for businesses, operating under the French Insurance Code and the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR).[1] The firm holds professional liability insurance and a financial guarantee with CGPA under policy identifiers RCP77920 and GFI77920, and states it has no equity links with insurance companies or mutual insurers.[1]
🏗️ Group structure. A distinct technology subsidiary, Dattak Technologies (SIREN 944 430 719), was incorporated in 2025.[4] CERT-DATTAK operates as part of Dattak Technologies and is described as a subsidiary of the Dattak company in formal RFC 2350 documentation.[5]
🌍 Cross-border presence. A Croatian financial supervisor (HANFA) notification register includes an entry for Dattak with ACPR listed as supervisory authority and registration number 22002872, with a notification date of 18 June 2024, consistent with EEA freedom-to-provide-services registration.[6]
Leadership
👩💼 Founders. Dattak was co-founded by Charlotte Couallier, Damien Damamme, and Benoît Grouchko.[7] Couallier serves as CEO (PDG) and is a graduate of Télécom Paris who received the "femme cyber 2022" trophy at Campus Cyber.[8] Her prior experience includes roles as an actuary, first employee at Leocare, and former director of commercial partnerships at AXA France.[9]
🔧 Technical and strategic leadership. Damamme serves as CTO and is identified as the publication director in Dattak's legal notices; his background includes a role as head of lab distribution at Allianz.[1][7] Grouchko is a serial entrepreneur who previously founded Teemo (sold to Near in 2020) and, following a management transition at the Series A stage, remained a shareholder supporting strategy and advisory missions while Couallier assumed the CEO role.[9][7]
🧭 Board and additional leadership. Dattak discloses board-level participation by Matthieu Bébéar (identified as ex-Chief Business Officer of AXA in seed communications) and Alexis du Peloux.[10][1] The leadership team also includes Alexia Morot as Head of Cyber Insurance, and Augustin Brunelle as director for Nord Est and BeLux expansion.[1][11]
Funding
💰 Seed round. Dattak raised €7M in a seed round in June 2022 led by XAnge, with participation from business angels including Matthieu Bébéar.[9] The round accompanied a stated partnership with Wakam to carry insurance risk and the launch of a broker-first digital subscription process.[9]
📈 Series A. In August 2023, Dattak raised €11M in a Series A led by XAnge with Breega and Bpifrance as co-investors, bringing cumulative funding to €18M.[7] Stated use of proceeds included doubling team size, expanding cybersecurity tooling, adapting the offer to larger firms (ETI), improving partner broker experience, and targeting more than €10M in business volume the following year.[7]
🏦 Investor composition. The investor base combines early-stage venture capital (XAnge, Breega) and state-backed venture (Bpifrance). No insurer corporate venture fund investment is disclosed; however, Bébéar participates as a business angel with prior AXA executive history.[7][9]
Business model and distribution
🔄 Operating model. Dattak functions as a cyber-focused insurtech intermediary combining delegated placement in a broker/MGA-like model with bundled cybersecurity services and incident response capacity.[1][12] The firm distributes exclusively through a network of partner brokers supported by an online platform that enables quoting in approximately one minute via a fully digital process.[9][7]
📊 Segment evolution. Dattak's disclosed client segmentation has expanded materially over time, measured by client revenue thresholds. Initial positioning targeted micro and small enterprises (TPE/PME), progressing to companies with €75M to €200M in revenue by June 2023, then up to €500M by February 2024.[9][13][14] A September 2024 partnership with Sompo expanded coverage to firms with up to €1bn in revenue, and current homepage claims extend the ceiling to €2bn.[15][16]
🗺️ Geographic expansion. France is Dattak's home market, with Paris as the registered office. The company expanded to Luxembourg followed by Belgium, where it names a dedicated BeLux expansion lead.[11] An EEA notification register entry (Croatia, HANFA) corroborates cross-border intermediary notification under the ACPR.[6]
📋 Vertical mix. A June 2023 interview describes a diversified portfolio spanning healthcare, industry, services, education, and local authorities, with "very few" underwriting prohibitions.[13]
Cyber insurance coverage
🛡️ Underwriting triggers. Dattak's cyber insurance covers multiple event types including malicious intrusion, human error, malicious employee actions, internal programming errors, and IT outage due to internal defects (as an optional module), with email fraud also available as an option.[17] The contract was explicitly expanded to cover major IT outages and IT provider failures — including scenarios analogous to the 2024 CrowdStrike incident — when they occur unexpectedly and disrupt operations, even absent a malicious attack.[18]
💼 First-party coverages. The policy provides business interruption coverage, system restoration and data reconstruction costs, replacement of irrecoverably damaged hardware (bricking), notification costs for personal data breaches (authority and impacted-party notification), and monitoring costs to detect misuse of leaked personal data.[17] Additional first-party elements include payment card losses and associated fines, telecom overbilling and cloud cost spikes (optional), and software replacement with improved versions following a cyberattack.[17]
🔐 Ransomware and fraud. Dattak's product includes ransomware ransom payment coverage, positioned as a last-resort measure, with clarity on ransom payment cited as a product attribute.[19][13] Cyberfraude coverage addresses financial loss from fraud following proven malicious intrusion, including fraudulent transfer requests, while email fraud coverage (with and without intrusion) is available as a module.[17]
⚖️ Third-party and regulatory coverages. Third-party liability protection encompasses cyber liability and media liability, including defense costs in connection with claims following disclosure of confidential or compromising information.[17] Coverage also extends to costs of investigations and administrative sanctions initiated by authorities following personal data violations or PCI DSS security rule breaches, including defense costs in regulatory proceedings.[17]
🚨 Embedded incident response. Dattak operates CERT-DATTAK, an internal 24/7 incident response function with an average intervention time of under two minutes. Assistance is provided without deductible, without sublimit, and without prerequisite validation, including for false positives.[2] The CERT coordinates technical response, legal support, crisis communications, and indemnification, relying on a network of specialized partners for complex cases while maintaining centralized control through its internal team.[2]
Cybersecurity services
🔍 Prevention platform. Dattak markets a suite of prevention tools positioned as exclusive to its insureds, branded as Dattak Défense.[12] This includes Scan Cyber for continuous surveillance of insureds' information systems with analysis reports and remediation guidance, a free advanced cybersecurity audit with corrective action mapping, a phishing campaign simulator for employee conditioning, and penetration testing services.[12]
📡 CERT service catalog. The CERT RFC 2350 document (v1.2, published September 2025) describes services spanning incident analysis and forensics, incident response support and remediation, crisis management, vulnerability and malware analysis, and proactive activities such as vulnerability scanning, Active Directory assessment, cloud configuration assessment, penetration testing, and cybersecurity training.[5]
🤖 MDR offering. Dattak markets an MDR (Managed Detection and Response) bundle combining insurance with EDR and a managed SOC, claiming average premium reductions of 30 percent for insureds using the formula and simplified eligibility including subscription without a cybersecurity questionnaire.[12] The MDR offering is presented as a distinct bundled tier tied to premium discounting rather than a feature included in all policies.[12]
Partnerships and capacity
🏛️ Capacity providers. Dattak's initial risk carrier was Wakam, established at the seed stage.[9] The carrier and reinsurer panel has since expanded to include Sompo, SCOR, Hannover Re, Chaucer, Hamilton, and Envelop Risk.[20] Per-risk capacity grew from €2M in June 2023 to €5M per company by February 2024, supported by Wakam, SCOR, and Envelop Risk among others.[13][14]
🎖️ Defense-sector partnership. Dattak partnered with the Direction générale de l'armement (DGA) to integrate the DGA cyber maturity framework (RMC) for the Defense Industrial and Technological Base (BITD), collaborating with ANSSI on the foundational level. The initiative is positioned as impacting roughly 4,000 French SMEs, enabling compliant firms to subscribe directly to Dattak's cyber insurance.[21]
📄 Product expansion. Dattak expanded beyond cyber into professional liability for the tech and services sector, offering a combined Cyber + RC Pro integrated contract and a standalone RC Pro product.[22] The combined offer features mutualized ceilings up to €10M for RC Pro and €5M for cyber, simplified underwriting without questionnaire up to €50M revenue, coverage for IT outages even without a cyberattack, an included attack surface scan, and an optional USA/Canada extension.[22]
Scale and performance
| KPI | Most recent figure | Prior datapoint | Source |
|---|---|---|---|
| Premiums placed | €10M (FY24) | — | [23] |
| Premiums placed target | €22M (end-2025) | — | [23] |
| Policyholders / clients | ~1,000 companies | 600+ (Jun 2023) | [7][13] |
| Headcount | 25 (Aug 2023) | — | [7] |
| Max per-risk capacity | €5M per company | €2M (Jun 2023) | [14][13] |
| Loss ratio | — | — | — |
| Revenue | — | — | — |
| Net income / net loss | — | — | — |
| MGA commission rate | — | — | — |
📝 Data note. The €10M and €22M premium figures are presented by Dattak as part of its own blog summary of a third-party interview not directly accessible at time of review and should be treated as company-reported until independently corroborated.[23]
Competitive positioning
🏆 Disclosed differentiators. Dattak's competitive positioning rests on four primary pillars: an integrated incident response capability anchored by CERT-DATTAK with rapid engagement and formal RFC 2350 documentation; bundled prevention and cyber tooling (attack surface monitoring, phishing simulation, audits) marketed as exclusive to insureds; a capacity architecture designed for progressive scaling into larger-company segments; and adjacency expansion into professional liability for tech and services via a combined Cyber + RC Pro contract.[2][12][22]
🔎 Peer context. Dattak operates within a broader cyber insurtech MGA ecosystem alongside peers such as At-Bay, Baobab Insurance, BOXX Insurance, Coalition, Cogitanda, Converge Insurance, Corvus Insurance, Cowbell, Elpha Secure, Emergence Insurance, Evolve MGA, Eye Security, Invision Cyber, Measured Analytics and Insurance, Onda, Pera, Resilience, SafeInside Insurance, Stoïk, and Sync Underwriting.[9][12]
Risk factors
⚠️ Capacity dependency. Dattak's model is fundamentally reliant on continued delegated capacity from its carrier and reinsurance panel. While multiple partners are displayed, specific binding authority terms, renewal corridors, and performance triggers are not publicly disclosed.[20]
🌐 Systemic exposure. Expansion into larger-company segments and explicit coverage of business interruption, IT outages, and provider failures increases correlation risk under systemic cyber events, particularly if reinsurance protections and accumulation controls are not proportionally scaled.[18]
💣 Ransomware governance. Ransom payment coverage is publicly marketed, but the absence of disclosed wording constraints, sanctions screening mechanisms, and sublimits in public materials presents a governance transparency gap.[19]
📜 Regulatory risk. As a broker and underwriting agency under ACPR supervision and ORIAS registration, any tightening of intermediary conduct, disclosure, or delegated authority oversight requirements could impact economics and distribution channel friction.[1]
✈️ Expansion execution. Geographic expansion into Belgium and Luxembourg introduces cross-border execution risk in distribution onboarding, claims servicing, and local market competition. Moving into professional liability changes claim patterns, tail risk profiles, and staffing requirements, particularly at the €10M RC Pro limit marketed.[11][22]
Strategic outlook
🚀 Growth ambitions. Dattak's strategic trajectory centers on building a European leadership position in cyber insurance combined with cybersecurity tooling, continuing to scale through broker distribution with fast digital subscription and embedded services.[7][9]
📐 Segment and product expansion. The roadmap includes further expansion into larger client segments via increased capacity and higher revenue ceilings, alongside diversification of the product set into liability and financial lines for tech and services through the RC Pro and combined offerings.[22][13]
Timeline of key events
| Date | Event |
|---|---|
| December 2021 | Company creation registered in the French official business directory.[3] |
| June 2022 | Seed round of €7M led by XAnge; business angels including Bébéar; partnership with Wakam to carry risk; broker-first digital process launched.[9] |
| October 2022 | Couallier recognized with "femme cyber 2022" trophy at Campus Cyber.[8] |
| June 2023 | Up-market move to €75M–€200M revenue clients; max capacity increased to €2M; 600+ clients claimed.[13] |
| August 2023 | Series A of €11M; cumulative funding reaches €18M; team at 25 employees; approximately 1,000 clients; Couallier becomes CEO/PDG.[7] |
| February 2024 | Capacity expanded to €5M per company; target companies up to €500M revenue; partners cited include Wakam, SCOR, and Envelop Risk.[14] |
| March 2024 | Partnership with Direction générale de l'armement and adoption of RMC framework with ANSSI collaboration; BITD scope and direct subscription claim.[21] |
| September 2024 | Sompo partnership expands coverage to companies with up to €1bn revenue.[15] |
| June 2025 | Launch of combined Cyber + RC Pro offer for tech sector; disclosed limits and underwriting simplification thresholds.[22] |
| July 2025 | Belgium expansion announced; BeLux expansion lead named.[11] |
| September 2025 | CERT RFC 2350 document v1.2 published.[5] |
| November 2025 | IT outage and provider failure coverage explicitly framed as included in the cyber contract.[18] |
See also
References
- ↑ 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 "Mentions légales". Dattak. Retrieved 2026-03-09.
- ↑ 2.0 2.1 2.2 2.3 "CERT-DATTAK". Dattak. Retrieved 2026-03-09.
- ↑ 3.0 3.1 "Dattak — Annuaire des Entreprises". Annuaire des Entreprises (INSEE). Retrieved 2026-03-09.
- ↑ "Dattak Technologies — Annuaire des Entreprises". Annuaire des Entreprises (INSEE). Retrieved 2026-03-09.
- ↑ 5.0 5.1 5.2 "CERT-DATTAK RFC 2350 v1.2" (PDF). Dattak Technologies. September 2025. Retrieved 2026-03-09.
- ↑ 6.0 6.1 "Notifikacije zastupnika i posrednika iz država članica EU" (PDF). HANFA. Retrieved 2026-03-09.
- ↑ 7.00 7.01 7.02 7.03 7.04 7.05 7.06 7.07 7.08 7.09 7.10 "Dattak lève 11M€ en Série A". Bpifrance. August 2023. Retrieved 2026-03-09.
- ↑ 8.0 8.1 "Femme cyber — Trophée Cefcys". Dattak. October 2022. Retrieved 2026-03-09.
- ↑ 9.00 9.01 9.02 9.03 9.04 9.05 9.06 9.07 9.08 9.09 9.10 "Communiqué de presse — Dattak lève 7 millions d'euros". Dattak. June 2022. Retrieved 2026-03-09.
- ↑ "Seed — Dattak lève 7 millions d'euros". Dattak. June 2022. Retrieved 2026-03-09.
- ↑ 11.0 11.1 11.2 11.3 "Dattak s'implante en Belgique". Dattak. July 2025. Retrieved 2026-03-09.
- ↑ 12.0 12.1 12.2 12.3 12.4 12.5 12.6 "Cyberattack — Prévention et services". Dattak. Retrieved 2026-03-09.
- ↑ 13.0 13.1 13.2 13.3 13.4 13.5 13.6 13.7 "Cyber : Dattak s'ouvre aux grosses PME". News Assurances Pro. June 2023. Retrieved 2026-03-09.
- ↑ 14.0 14.1 14.2 14.3 "Dattak multiplie ses capacités". Dattak. February 2024. Retrieved 2026-03-09.
- ↑ 15.0 15.1 "Cyber carrier Dattak teams with Sompo to cover large French firms". Commercial Risk Online. September 2024. Retrieved 2026-03-09.
- ↑ "Dattak — Accueil". Dattak. Retrieved 2026-03-09.
- ↑ 17.0 17.1 17.2 17.3 17.4 17.5 "Assurance cyber". Dattak. Retrieved 2026-03-09.
- ↑ 18.0 18.1 18.2 "Panne informatique et assurance cyber". Dattak. November 2025. Retrieved 2026-03-09.
- ↑ 19.0 19.1 "Insurtech cyber : le paiement des rançons n'effraie pas Dattak". News Assurances Pro. Retrieved 2026-03-09.
- ↑ 20.0 20.1 "Dattak carrier and reinsurer panel". Dattak. Retrieved 2026-03-09.
- ↑ 21.0 21.1 "Dattak s'associe à la Direction générale de l'armement". Dattak. March 2024. Retrieved 2026-03-09.
- ↑ 22.0 22.1 22.2 22.3 22.4 22.5 "Dattak Cyber + RC Pro Tech". Dattak. June 2025. Retrieved 2026-03-09.
- ↑ 23.0 23.1 23.2 "Interview Charlotte Couallier". Dattak. Retrieved 2026-03-09.