Dattak: Difference between revisions

Content deleted Content added
Created page with "== Corporate profile and regulatory identifiers == 🏢 '''Legal identity.''' Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary headquartered at 65 Boulevard Lannes, 75016 Paris, France.<ref name="dattak-legal">{{cite web |title=Mentions légales |url=https://www.dattak.io/fr/legal |publisher=Dattak |access-date=9 March 2026}}</ref> The company is registered under SIREN 907 857 817 with the Paris trade and companies regis..."
 
No edit summary
 
Line 1:
{{Infobox company
== Corporate profile and regulatory identifiers ==
| name = Dattak
| legal_name = Dattak S.A.S.
| logo = Logo of Dattak.svg
| logo_size =
| logo_alt = Dattak logo
| logo_caption =
| type = Private — insurtech wholesale broker
| exchange =
| ticker =
| isin =
| lei =
| license_type = Insurance intermediary (courtier) — ORIAS No. 22002872
| npn =
| coverholder_ref =
| incorporation = France
| founded = {{Start date and age|2021|12|01}}
| headquarter = Paris, France
| domicile = France
| insurance_jurisdictions = France<br/>Luxembourg<br/>Belgium
| regulator = Autorité de Contrôle Prudentiel et de Résolution (ACPR)
| ultimate_parent =
| shareholders = XAnge<br/>Breega<br/>Bpifrance<br/>Founders and business angels
| key_people = Charlotte Couallier, co-founder and CEO<br/>Damien Damamme, co-founder and CTO<br/>Benoît Grouchko, co-founder
| num_employees = 25 (August 2023)
| customer_segments = SMEs to upper mid-market companies (up to €2bn revenue)
| lines_of_business = Cyber insurance<br/>Professional liability (RC Pro)
| segments =
| products = Cyber insurance<br/>Combined Cyber + RC Pro<br/>Standalone RC Pro<br/>MDR bundle (EDR + managed SOC)
| technology_platform = Dattak Défense (risk management platform)<br/>Scan Cyber (attack surface monitoring)<br/>CERT-DATTAK (incident response)
| capacity_providers = Wakam<br/>Sompo<br/>SCOR<br/>Hannover Re<br/>Chaucer<br/>Hamilton<br/>Envelop Risk
| distribution = Broker network with digital quoting and binding platform
| geographic_markets = France<br/>Luxembourg<br/>Belgium
| num_customers = approximately 1,000 companies (August 2023)
| competitors = At-Bay<br/>Stoïk<br/>Coalition<br/>Cowbell<br/>Corvus Insurance<br/>Eye Security
| market_share_rank =
| financial_year =
| market_cap =
| revenue =
| insurance_revenue =
| operating_income =
| ebitda =
| net_income =
| gwp = €10M (2024, company-reported)
| nwp =
| loss_ratio =
| combined_ratio =
| commission_rate =
| total_assets =
| invested_assets =
| technical_reserves =
| csm =
| net_debt =
| equity =
| operating_margin =
| solvency_ratio =
| roe =
| total_funding = €18M
| last_round = Series A, €11M, August 2023
| last_valuation =
| lead_investors = XAnge<br/>Breega<br/>Bpifrance
| capital_structure =
| ifsr =
| capacity_partner_ratings =
| ratings =
| footnotes = GWP figure is company-reported and unverified by independent audit.
}}
{{Summary:Dattak|5}}
{{More details}}
{{Section separator}}
== Corporate profile ==
 
🏢 '''Legal identity.''' Dattak S.A.S. (Société par Actions Simplifiée) is a French cyber-focused insurtech intermediary headquarteredregistered atunder 65SIREN Boulevard907 Lannes,857 75016817 with the Paris, Francetrade and companies register (RCS Paris).<ref name="dattak-legal">{{cite web |title=Mentions légales |url=https://www.dattak.io/fr/legal |publisher=Dattak |access-date=9 March 2026-03-09}}</ref> The company is registered underoffice SIRENis 907located 857at 81765 withBoulevard theLannes, Paris trade and companies register (RCS75016 Paris).<ref, name="dattak-legal"/>with Anan additional operational address at 21 Rue du Général Foy, 75008 Paris, iswhich usedserves as the CERT contact address and appears inacross site footers, consistent with a secondary establishment.<ref name="dattak-cert">{{cite web |title=CERT Dattak-DATTAK |url=https://www.dattak.io/fr/cert |publisher=Dattak |access-date=92026-03-09}}</ref> MarchThe company was created on 1 December 2021 per France's official business directory.<ref name="annuaire_dattak">{{cite web |title=Dattak — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-dattak-907857817 |publisher=Annuaire des Entreprises (INSEE) |access-date=2026-03-09}}</ref>
 
📋 '''Regulatory status.''' Dattak is registered with ORIAS under No. 22002872 as a wholesale broker (courtier grossiste) in commercial property and casualty insurance for businesses, operating under the French Insurance Code and the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR).<ref name="legal"/> The firm holds professional liability insurance and a financial guarantee with CGPA under policy identifiers RCP77920 and GFI77920, and states it has no equity links with insurance companies or mutual insurers.<ref name="legal"/>
📅 '''Founding.''' The French official business directory (INSEE-backed) records the company creation date as 1 December 2021.<ref name="annuaire-dattak">{{cite web |title=Dattak — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-dattak-907857817 |publisher=Annuaire des Entreprises |access-date=9 March 2026}}</ref> Investor communications consistently describe the business as founded in late 2021.<ref name="bpifrance">{{cite web |title=Dattak lève 11M€ en Série A |url=https://presse.bpifrance.fr/dattak-leve-11meur-en-serie-a-et-affirme-ses-grandes-ambitions-pour-offrir-la-meilleure-protection-de-cyber-assurance-et-cyber-securite/ |publisher=Bpifrance |date=August 2023 |access-date=9 March 2026}}</ref> Dattak is privately held.
 
🏗️ '''Group structure.''' A distinct technology subsidiary, Dattak Technologies (SIREN 944 430 719), was incorporated in 2025.<ref name="annuaire_tech">{{cite web |title=Dattak Technologies — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-technologies-944430719 |publisher=Annuaire des Entreprises (INSEE) |access-date=2026-03-09}}</ref> CERT-DATTAK operates as part of Dattak Technologies and is described as a subsidiary of the Dattak company in formal RFC 2350 documentation.<ref name="rfc2350">{{cite web |title=CERT-DATTAK RFC 2350 v1.2 |url=https://content.dattak.io/hubfs/CERT-DATTAK_RFC2350_EN_v1.2.pdf |publisher=Dattak Technologies |date=September 2025 |access-date=2026-03-09}}</ref>
⚖️ '''Regulated status.''' Dattak positions itself as a wholesale broker ("courtier grossiste") in commercial property and casualty insurance for businesses, operating under the French Insurance Code.<ref name="dattak-legal"/> It is registered with ORIAS under No. 22002872 and operates under the supervision of the Autorité de Contrôle Prudentiel et de Résolution (ACPR).<ref name="dattak-legal"/> The firm holds professional liability insurance and a financial guarantee with CGPA, under policy identifiers RCP77920 (professional liability) and GFI77920 (financial guarantee).<ref name="dattak-legal"/> Dattak discloses no equity links with insurance companies or mutual insurers.<ref name="dattak-legal"/>
 
🌍 '''Cross-border presence.''' A Croatian financial supervisor (HANFA) notification register includes an entry for Dattak with ACPR listed as supervisory authority and registration number 22002872, with a notification date of 18 June 2024, consistent with EEA freedom-to-provide-services registration.<ref name="hanfa">{{cite web |title=Notifikacije zastupnika i posrednika iz država članica EU |url=https://www.hanfa.hr/media/wgtasgrg/notifikacije-zastupnika-i-posrednika-iz-dr%C5%BEava-%C4%8Dlanica-eu-a.pdf |publisher=HANFA |access-date=2026-03-09}}</ref>
🏗️ '''Group structure.''' A distinct technology subsidiary, Dattak Technologies (SIREN 944 430 719), was incorporated in 2025.<ref name="annuaire-tech">{{cite web |title=Dattak Technologies — Annuaire des Entreprises |url=https://annuaire-entreprises.data.gouv.fr/entreprise/dattak-technologies-944430719 |publisher=Annuaire des Entreprises |access-date=9 March 2026}}</ref> CERT-DATTAK's RFC 2350 documentation describes this subsidiary as part of the Dattak group.<ref name="cert-rfc2350">{{cite web |title=CERT-DATTAK RFC 2350 v1.2 |url=https://content.dattak.io/hubfs/CERT-DATTAK_RFC2350_EN_v1.2.pdf |publisher=Dattak Technologies |date=September 2025 |access-date=9 March 2026}}</ref>
 
🌍 '''Cross-border notifications.''' A Croatian financial supervisor (HANFA) register includes an entry for Dattak showing ACPR as the supervisory authority and registration number 22002872, with a notification date of 18 June 2024, consistent with EEA freedom-to-provide-services intermediary notification registers.<ref name="hanfa">{{cite web |title=Notifikacije zastupnika i posrednika iz država članica EU-a |url=https://www.hanfa.hr/media/wgtasgrg/notifikacije-zastupnika-i-posrednika-iz-dr%C5%BEava-%C4%8Dlanica-eu-a.pdf |publisher=HANFA |access-date=9 March 2026}}</ref>
 
🔑 '''Intermediary classification.''' France does not use a formal "MGA license" label in the manner of certain other jurisdictions; Dattak's disclosed authorisation is its ORIAS registration as a wholesale broker.<ref name="dattak-legal"/> The firm describes itself as a broker and underwriting agency and is presented in all primary materials as an intermediary rather than a licensed risk-bearing insurer.<ref name="dattak-legal"/>
 
{{Section separator}}
== Leadership ==
== Founders, leadership, and governance ==
 
👩‍💼 '''Charlotte Couallier''' is co-founder and CEO (PDG).<ref name="bpifrance"/> A graduate of Télécom Paris, she received a "femme cyber 2022" trophy at Campus Cyber.<ref name="dattak-femme-cyber">{{cite web |title=Femme Cyber — Trophée Cefcys |url=https://www.dattak.io/fr/blog/femme-cyber-trophee-cefcys-telecom-paris-campus-cyber |publisher=Dattak |date=October 2022 |access-date=9 March 2026}}</ref> Before founding Dattak, Couallier worked as an actuary and first employee at Leocare, followed by a role as director of commercial partnerships at AXA France.<ref name="dattak-seed-pr">{{cite web |title=Communiqué de presse — Dattak lève 7M€ |url=https://www.dattak.io/blog/communique-de-presse-assurtech-dattak-leve-7-million-d-euros-xange-business-angel-cyber |publisher=Dattak |date=June 2022 |access-date=9 March 2026}}</ref>
 
👨‍💻 '''Damien Damamme''' is co-founder and CTO and is identified as the publication director in Dattak's legal notices.<ref name="dattak-legal"/> Investor press materials describe him as formerly responsible for "lab distribution" at Allianz.<ref name="bpifrance"/>
 
👩‍💼 '''Founders.''' Dattak was co-founded by Charlotte Couallier, Damien Damamme, and Benoît Grouchko.<ref name="bpifrance">{{cite web |title=Dattak lève 11M€ en Série A |url=https://presse.bpifrance.fr/dattak-leve-11meur-en-serie-a-et-affirme-ses-grandes-ambitions-pour-offrir-la-meilleure-protection-de-cyber-assurance-et-cyber-securite/ |publisher=Bpifrance |date=August 2023 |access-date=2026-03-09}}</ref> Couallier serves as CEO (PDG) and is a graduate of Télécom Paris who received the "femme cyber 2022" trophy at Campus Cyber.<ref name="femme_cyber">{{cite web |title=Femme cyber — Trophée Cefcys |url=https://www.dattak.io/fr/blog/femme-cyber-trophee-cefcys-telecom-paris-campus-cyber |publisher=Dattak |date=October 2022 |access-date=2026-03-09}}</ref> Her prior experience includes roles as an actuary, first employee at Leocare, and former director of commercial partnerships at AXA France.<ref name="seed_pr">{{cite web |title=Communiqué de presse — Dattak lève 7 millions d'euros |url=https://www.dattak.io/blog/communique-de-presse-assurtech-dattak-leve-7-million-d-euros-xange-business-angel-cyber |publisher=Dattak |date=June 2022 |access-date=2026-03-09}}</ref>
🚀 '''Benoît Grouchko''' is the third co-founder, described as a serial entrepreneur who founded Teemo and sold it to Near in 2020.<ref name="dattak-seed-pr"/> Following the Series A round, a management transition saw Couallier assume the CEO/PDG title while Grouchko remained a shareholder supporting strategy and advisory missions.<ref name="bpifrance"/>
 
🔧 '''Technical and strategic leadership.''' Damamme serves as CTO and is identified as the publication director in Dattak's legal notices; his background includes a role as head of lab distribution at Allianz.<ref name="legal"/><ref name="bpifrance"/> Grouchko is a serial entrepreneur who previously founded Teemo (sold to Near in 2020) and, following a management transition at the Series A stage, remained a shareholder supporting strategy and advisory missions while Couallier assumed the CEO role.<ref name="seed_pr"/><ref name="bpifrance"/>
👥 '''Leadership team and board.''' Dattak's leadership group includes Alexia Morot as Head of Cyber Insurance, alongside other functional leaders reporting to the CEO and CTO.<ref name="dattak-legal"/><ref name="dattak-seed-pr"/> Board-level participation includes Matthieu Bébéar, identified as former Chief Business Officer of AXA, and Alexis du Peloux.<ref name="bpifrance"/><ref name="dattak-seed-blog">{{cite web |title=Seed — Dattak lève 7M€ en cybersécurité |url=https://www.dattak.io/blog/seed-cybersecurite-dattak-leve-7-millions-d-euros-assurance-tpe-pme |publisher=Dattak |date=June 2022 |access-date=9 March 2026}}</ref><ref name="newsassurances-grosses-pme">{{cite web |title=Cyber : Dattak s'ouvre aux grosses PME |url=https://www.newsassurancespro.com/cyber-dattak-souvre-aux-grosses-pme/01691557190 |publisher=News Assurances Pro |date=June 2023 |access-date=9 March 2026}}</ref> No AXA Group corporate venture arm investment or AXA capacity-provider relationship is disclosed in primary materials; however, both Couallier (prior employment) and Bébéar (angel investor with executive history) carry AXA connections.<ref name="dattak-seed-pr"/>
 
🇧🇪🧭 '''GeographicBoard expansionand additional leadership.''' ForDattak thediscloses Belgiumboard-level expansionparticipation by Matthieu Bébéar (identified as ex-Chief Business Officer of AXA in seed communications) and Alexis du Peloux.<ref name="seed_blog">{{cite web |title=Seed — Dattak lève 7 millions d'euros |url=https://www.dattak.io/blog/seed-cybersecurite-dattak-leve-7-millions-d-euros-assurance-tpe-pme |publisher=Dattak |date=June 2022 |access-date=2026-03-09}}</ref><ref name="legal"/> The leadership team also includes Alexia Morot as Head of Cyber Insurance, and Augustin Brunelle is named as director for Nord- Est and BeLux expansion.<ref name="dattak-belgiquelegal"/><ref name="belgium">{{cite web |title=Dattak s'implante Implantationen Belgique |url=https://www.dattak.io/fr/blog/dattak-implantation-belgique-assurance-cyber |publisher=Dattak |date=July 2025 |access-date=9 March 2026-03-09}}</ref>
 
{{Section separator}}
== Funding, valuation posture, and capitalisation ==
 
💰 '''Seed round.''' Dattak raised €7M in a seed round in June 2022 led by XAnge, with participation from business angels including Matthieu Bébéar.<ref name="seed_pr"/> The round accompanied a stated partnership with Wakam to carry insurance risk and the launch of a broker-first digital subscription process.<ref name="seed_pr"/>
{| class="wikitable sortable" style="width:100%; font-size:0.85em"
|+ 💰 Dattak S.A.S. — funding rounds (EUR millions)<ref name="bpifrance"/><ref name="dattak-seed-pr"/>
! scope="col" style="text-align:center" | Round
! scope="col" style="text-align:center" | Date announced
! scope="col" style="text-align:center; width:7em" | Amount raised
! scope="col" style="text-align:center" | Lead investor
! scope="col" style="text-align:center" | Notable co-investors
! scope="col" style="text-align:center; width:7em" | Cumulative funding
|-
| Seed || Jun 2022 || style="text-align:right" | €7M || XAnge || Business angels incl. Matthieu Bébéar || style="text-align:right" | €7M
|-
| Series A || Aug 2023 || style="text-align:right" | €11M || XAnge || Breega; Bpifrance || style="text-align:right" | €18M
|}
 
💶📈 '''TotalSeries capital raisedA.''' In August 2023, Dattak raised €11M in a cumulativeSeries €18MA led by XAnge with acrossBreega twoand roundsBpifrance as ofco-investors, Augustbringing 2023cumulative funding to €18M.<ref name="bpifrance"/> The statedStated use of Series A proceeds included doubling team size, expanding cybersecurity tooling, adapting the productoffer offering forto larger firms (ETI), improving the partner broker experience, and targeting more than €10M in business volume the following year.<ref name="bpifrance"/>
 
🏦 '''Investor profilecomposition.''' The investor base comprisescombines early-stage venture capital (XAnge, Breega) and state-backed venture capital (Bpifrance).<ref name="bpifrance"/> No insurer corporate venture fund investment is disclosed.; Bébéarhowever, whoBébéar investedparticipates as a business angel, haswith prior AXA executive history, and Couallier has prior AXA employment, but no AXA corporate venture entity appears in the disclosed investor set.<ref name="dattak-seed-prbpifrance"/><ref name="seed_pr"/>
 
{{Section separator}}
== OperatingBusiness model, customer segments, and geographic expansiondistribution ==
 
🔧🔄 '''BusinessOperating model.''' Dattak functions as a cyber-focused insurtech intermediary combining delegated placement in a broker/MGA-like delegated placementmodel with bundled cybersecurity services and incident response capacity.<ref name="dattak-legal"/><ref name="dattak-cyberattack">{{cite web |title=Cyberattack — DattakPrévention et services |url=https://www.dattak.io/fr/cyberattack |publisher=Dattak |access-date=9 March 2026-03-09}}</ref> The firm distributes exclusively through a network of partner brokers supported by an online platform enablingthat quoteenables generationquoting in approximately one minute via a fully digital process.<ref name="bpifranceseed_pr"/><ref name="dattak-seed-prbpifrance"/>
 
📈📊 '''Segment expansionevolution.''' Dattak's disclosed client segmentation has broadenedexpanded materially over time, usingmeasured by client revenue asthresholds. theInitial primarypositioning boundary.targeted Atmicro launch,and thesmall firm targeted Frenchenterprises (TPE/SMEs.<ref name="dattak-seed-pr"/> By June 2023PME), itprogressing was addressingto companies with €75M to €200M ofin revenue andby aJune maximum2023, capacitythen ofup €2Mto per€500M insured,by claimingFebruary over 600 clients2024.<ref name="newsassurances-grosses-pmeseed_pr"/><ref Inname="newsassurances_pme">{{cite Februaryweb 2024,|title=Cyber the: targetDattak expandeds'ouvre toaux companiesgrosses withPME up|url=https://www.newsassurancespro.com/cyber-dattak-souvre-aux-grosses-pme/01691557190 to|publisher=News €500MAssurances ofPro revenue|date=June with capacity2023 reaching €5M per insured.|access-date=2026-03-09}}</ref><ref name="dattak-capacites">{{cite web |title=Dattak multiplie ses capacités |url=https://www.dattak.io/fr/blog/multiplie-capacites |publisher=Dattak |date=February 2024 |access-date=9 March 2026-03-09}}</ref> ByA September 2024, a partnership with Sompo extendedexpanded coverage to French companiesfirms with revenues up to €1bn in revenue, and current homepage claims extend the ceiling to €2bn.<ref name="commercialrisk-sompo">{{cite web |title=Cyber carrier Dattak teams with Sompo to cover large French firms |url=https://www.commercialriskonline.com/cyber-carrier-dattak-teams-with-sompo-to-cover-large-french-firms/ |publisher=Commercial Risk Online |date=September 2024 |access-date=9 March 2026-03-09}}</ref> The current homepage claims coverage for companies up to €2bn of revenue.<ref name="dattak-homepage">{{cite web |title=Dattak — HomepageAccueil |url=https://www.dattak.io/ |publisher=Dattak |access-date=9 March 2026-03-09}}</ref>
 
🗺️ '''Geographic expansion.''' France is Dattak's home market, with Paris as the registered office. The company expanded to Luxembourg followed by Belgium, where it names a dedicated BeLux expansion lead.<ref name="belgium"/> An EEA notification register entry (Croatia, HANFA) corroborates cross-border intermediary notification under the ACPR.<ref name="hanfa"/>
🏥 '''Vertical diversity.''' A June 2023 interview describes a diversified portfolio spanning healthcare, industry, services, education, and local authorities, and states the MGA has very few underwriting prohibitions.<ref name="newsassurances-grosses-pme"/> Hard quantitative portfolio breakdown by revenue band or vertical is not publicly available. Investor press materials from August 2023 cite a portfolio of approximately 1,000 French companies, consistent with a volume-driven broker distribution model.<ref name="bpifrance"/>
 
📋 '''Vertical mix.''' A June 2023 interview describes a diversified portfolio spanning healthcare, industry, services, education, and local authorities, with "very few" underwriting prohibitions.<ref name="newsassurances_pme"/>
🗺️ '''Geographic footprint.''' France is the home market, with the registered office in Paris.<ref name="dattak-legal"/> Dattak subsequently expanded to Luxembourg, followed by Belgium, where Belgian companies already use the offering and a BeLux expansion lead has been named.<ref name="dattak-belgique"/> An entry on the Croatian HANFA notification list provides additional corroboration of EEA intermediary notification activity.<ref name="hanfa"/>
 
{{Section separator}}
== Cyber insurance product and coverage analysis ==
 
📋🛡️ '''Underwriting triggers.''' Dattak's cyber insurance product covers multiple event types: including malicious intrusion (cyberattack), human error, emailmalicious fraud (optional module), maliciousemployee employeesactions, internal programming errors, and IT outage due to internal defectdefects (as an optional module), with email fraud also available as an option.<ref name="dattak-insurance">{{cite web |title=Assurance cyber |url=https://www.dattak.io/fr/insurance |publisher=Dattak |access-date=9 March 2026-03-09}}</ref> The contract was explicitly expanded to explicitly cover major IT outages and IT provider failures — including scenarios analogous to the 2024 CrowdStrike incident — even absent a malicious attack, when they occur unexpectedly and disrupt operations, even absent a malicious attack.<ref name="dattak-panne">{{cite web |title=Panne informatique et assurance cyber |url=https://www.dattak.io/fr/blog/dattak-blog-panne-informatique-assurance-cyber |publisher=Dattak |date=November 2025 |access-date=9 March 2026-03-09}}</ref>
 
🛡️💼 '''First-party coverages.''' BusinessThe interruptionpolicy isprovides listedbusiness as a coreinterruption coverage, element.<ref name="dattak-insurance"/> Systemsystem restoration and data reconstruction costs, arereplacement covered.<refof name="dattak-insurance"/>irrecoverably Ransomwaredamaged andhardware cyber(bricking), extortionnotification coveragecosts includesfor ransompersonal payment,data withbreaches a(authority statedand lastimpacted-resortparty posturenotification), and amonitoring framingcosts ofto paymentdetect claritymisuse asof aleaked productpersonal attributedata.<ref name="newsassurances-ranconsinsurance"/>{{cite webAdditional |title=Lefirst-party paiementelements desinclude rançonspayment n'effraiecard paslosses Dattakand |url=https://www.newsassurancespro.com/insurtech-cyber-le-paiement-des-rancons-neffraie-pas-dattak/01691503085associated |publisher=Newsfines, Assurancestelecom Prooverbilling |access-date=9and Marchcloud 2026}}</ref><refcost name="newsassurances-grosses-pme"/>spikes Hardware(optional), and software replacement forwith irrecoverableimproved "bricking"versions following a cyberattack is explicitly included.<ref name="dattak-insurance"/> Additional first-party elements include:
* Notification costs for personal data theft (authority and impacted-party notifications)
* Monitoring and surveillance costs for leaked personal data
* Payment card losses including banking costs and legally due fines after a confidentiality breach
* Telecom overbilling and cloud cost spikes (optional)
* Software and application improvement costs following cyberattack impacts<ref name="dattak-insurance"/>
 
🔐 '''Ransomware and fraud.''' Dattak's product includes ransomware ransom payment coverage, positioned as a last-resort measure, with clarity on ransom payment cited as a product attribute.<ref name="ransomware">{{cite web |title=Insurtech cyber : le paiement des rançons n'effraie pas Dattak |url=https://www.newsassurancespro.com/insurtech-cyber-le-paiement-des-rancons-neffraie-pas-dattak/01691503085 |publisher=News Assurances Pro |access-date=2026-03-09}}</ref><ref name="newsassurances_pme"/> Cyberfraude coverage addresses financial loss from fraud following proven malicious intrusion, including fraudulent transfer requests, while email fraud coverage (with and without intrusion) is available as a module.<ref name="insurance"/>
🤝 '''Third-party coverages.''' The policy provides cyber liability and media liability protection, including defence costs in connection with third-party claims arising from disclosure of confidential or compromising information.<ref name="dattak-insurance"/> Regulatory defence and investigation costs are covered for proceedings initiated by competent authorities following personal data violations or PCI DSS security breaches, including CNIL investigations.<ref name="dattak-insurance"/>
 
⚖️ '''Third-party and regulatory coverages.''' Third-party liability protection encompasses cyber liability and media liability, including defense costs in connection with claims following disclosure of confidential or compromising information.<ref name="insurance"/> Coverage also extends to costs of investigations and administrative sanctions initiated by authorities following personal data violations or PCI DSS security rule breaches, including defense costs in regulatory proceedings.<ref name="insurance"/>
🆘 '''Embedded breach response.''' Dattak operates an internal CERT model with a 24/7 hotline, an average intervention time of under two minutes, and assistance without deductible, sublimit, or prerequisite validation — including for false positives.<ref name="dattak-cert"/> The CERT coordinates technical response, legal support, crisis communications, and indemnification, relying on a network of specialised partners for complex cases while maintaining centralised control.<ref name="dattak-cert"/> The CERT RFC 2350 document (v1.2, published 10 September 2025) details services spanning incident analysis, forensics, remediation, crisis management, vulnerability and malware analysis, and proactive activities such as vulnerability scanning, Active Directory assessment, cloud configuration assessment, penetration testing, and cybersecurity training.<ref name="cert-rfc2350"/>
 
🚨 '''Embedded incident response.''' Dattak operates CERT-DATTAK, an internal 24/7 incident response function with an average intervention time of under two minutes. Assistance is provided without deductible, without sublimit, and without prerequisite validation, including for false positives.<ref name="cert"/> The CERT coordinates technical response, legal support, crisis communications, and indemnification, relying on a network of specialized partners for complex cases while maintaining centralized control through its internal team.<ref name="cert"/>
{{Section separator}}
== Cybersecurity services and technology stack ==
 
{{Section separator}}
🔍 '''Pre-bind and preventive tooling.''' Dattak markets a prevention platform exclusively for its insureds, comprising several tools: Dattak Défense (a risk management platform for evaluating and controlling cyber risk), Scan Cyber (continuous surveillance of information systems with analysis reports and remediation guidance), a free advanced cybersecurity audit with corrective action mapping, a phishing campaign simulator for employee conditioning, and penetration testing.<ref name="dattak-cyberattack"/>
== Cybersecurity services ==
 
🔍 '''Prevention platform.''' Dattak markets a suite of prevention tools positioned as exclusive to its insureds, branded as Dattak Défense.<ref name="cyberattack"/> This includes Scan Cyber for continuous surveillance of insureds' information systems with analysis reports and remediation guidance, a free advanced cybersecurity audit with corrective action mapping, a phishing campaign simulator for employee conditioning, and penetration testing services.<ref name="cyberattack"/>
🖥️ '''In-force and post-incident services.''' During the policy term, CERT-DATTAK provides ongoing proactive activities including vulnerability scanning, Active Directory and cloud assessments, and cybersecurity training for its customer community under contract.<ref name="cert-rfc2350"/> The CERT also functions as an always-on post-incident response capability, coordinating technical response and crisis handling.<ref name="dattak-cert"/>
 
📡 '''CERT service catalog.''' The CERT RFC 2350 document (v1.2, published September 2025) describes services spanning incident analysis and forensics, incident response support and remediation, crisis management, vulnerability and malware analysis, and proactive activities such as vulnerability scanning, Active Directory assessment, cloud configuration assessment, penetration testing, and cybersecurity training.<ref name="rfc2350"/>
🛡️ '''MDR offering.''' Dattak markets a Managed Detection and Response (MDR) package bundling insurance with EDR and a managed SOC, claiming average premium reductions of 30 percent for insureds using this formula, along with simplified eligibility including subscription without a cybersecurity questionnaire.<ref name="dattak-cyberattack"/> Several cybersecurity tools are framed as included for all Dattak insureds, while MDR is presented as a distinct bundled tier tied to premium discounting, implying an upsell structure rather than universal inclusion.<ref name="dattak-cyberattack"/>
 
🤖 '''MDR offering.''' Dattak markets an MDR (Managed Detection and Response) bundle combining insurance with EDR and a managed SOC, claiming average premium reductions of 30 percent for insureds using the formula and simplified eligibility including subscription without a cybersecurity questionnaire.<ref name="cyberattack"/> The MDR offering is presented as a distinct bundled tier tied to premium discounting rather than a feature included in all policies.<ref name="cyberattack"/>
⚙️ '''Technology stack.''' Dattak states that its cyber scan is developed internally and characterises CERT as an in-house team, while also acknowledging reliance on a network of specialised partners for complex cases.<ref name="dattak-cyberattack"/> Specific third-party technology vendors for MDR, EDR, SOC, and telemetry are not publicly identified.
 
{{Section separator}}
== Partnerships, capacity, and product expansioncapacity ==
 
🏛️ '''Capacity providers.''' Dattak's initial risk carrier was Wakam, established through a partnership announced at the seed roundstage.<ref name="dattak-seed-pr"/><ref name="newsassurances-grosses-pmeseed_pr"/> The carrier and reinsurer panel subsequentlyhas since expanded to include Sompo, SCOR, Hannover Re, Chaucer, Hamilton, and Envelop Risk alongside Wakam.<ref name="dattak-carrier-logoscarriers">{{cite web |title=Dattak carrier/ and reinsurer panel |url=https://res.cloudinary.com/dattak/image/upload/v1728918907/Group_520_608738b1c2.png |publisher=Dattak |date=October 2024 |access-date=9 March 2026-03-09}}</ref> The 2024Per-risk capacity expansiongrew specificallyfrom cited€2M in June 2023 to €5M per company by February 2024, supported by Wakam, SCOR, and Envelop asRisk backingamong partnersothers.<ref name="dattak-newsassurances_pme"/><ref name="capacites"/>
 
🛡️🎖️ '''DefenceDefense-industrysector partnership.''' Dattak partnered with the Direction générale de l'armement (DGA) to integrate the DGA cyber maturity framework ("RMC") for the DefenceDefense Industrial and Technological Base (BITD), collaborating with collaboration from ANSSI on the foundational level. The initiative is positioned as impacting roughly 4,000 French SMEs, enabling compliant firms to subscribe directly to Dattak's cyber insurance.<ref name="dattak-dga">{{cite web |title=Dattak s'associe à la Direction générale de l'armement |url=https://www.dattak.io/fr/blog/dattak-associe-direction-generale-armement |publisher=Dattak |date=March 2024 |access-date=9 March 2026-03-09}}</ref> This linkage is described as impacting approximately 4,000 French SMEs, allowing compliant firms to subscribe directly to Dattak's cyber insurance.<ref name="dattak-dga"/>
 
📄 '''Product expansion beyond cyber.''' Dattak nowexpanded marketsbeyond cyber into professional liability products for the technologytech and services sector, offering both a combined Cyber + RC Pro integrated contract and a standalone RC Pro product.<ref name="dattak-homepage"/> The combined offer features mutualized ceilings of up to €10M for RC Pro and €5M for cyber, simplified underwriting without questionnaire for companies up to €50M revenue, IT outage coverage even absent cyberattack, an included attack surface scan, and an optional USA/Canada extension.<ref name="dattak-rc-prorcpro">{{cite web |title=Dattak Cyber + RC Pro Tech |url=https://www.dattak.io/fr/blog/dattak-cyber-rc-pro-tech |publisher=Dattak |date=June 2025 |access-date=9 March 2026-03-09}}</ref> ThisThe expansioncombined capturesoffer adjacentfeatures financialmutualized linesceilings andup liabilityto spend€10M ratherfor thanRC purePro and €5M for cyber-only, premiumsimplified underwriting without questionnaire up to €50M revenue, coverage for IT outages even without a cyberattack, an included attack surface scan, and an optional USA/Canada extension.<ref name="dattak-rc-prorcpro"/>
 
{{Section separator}}
== Scale indicatorsand performance ==
 
{| class="wikitable sortable" style="width:100%; font-size:0.85em"
|+ 📊 Dattak — key performance indicators, cumulative and annual, various periods, as disclosed
|+ 📊 Dattak S.A.S. — disclosed key performance indicators<ref name="dattak-interview">{{cite web |title=Interview Charlotte Couallier |url=https://www.dattak.io/fr/blog/dattak-interview-charlotte-couallier |publisher=Dattak |access-date=9 March 2026}}</ref><ref name="bpifrance"/><ref name="dattak-capacites"/>
! scope="col" style="text-align:center" | KPI
! scope="col" style="text-align:centerright; width:8em" | Most recent figure
! scope="col" style="text-align:centerright; width:8em" | EarlierPrior datapoint
! scope="col" style="text-align:center; width:6em" | Source
|-
| Premiums placed
| Premiums placed || style="text-align:right" | €10M (2024) || style="text-align:right" | —
| style="text-align:right" | €10M (FY24)
| style="text-align:right" | —
| <ref name="interview">{{cite web |title=Interview Charlotte Couallier |url=https://www.dattak.io/fr/blog/dattak-interview-charlotte-couallier |publisher=Dattak |access-date=2026-03-09}}</ref>
|-
| Premiums placed target || style="text-align:right" | €22M (end-2025) || style="text-align:right" | —
| style="text-align:right" | €22M (end-2025)
| style="text-align:right" | —
| <ref name="interview"/>
|-
| Policyholders / clients || style="text-align:right" | ~1,000 companies || style="text-align:right" | 600+ (Jun 2023)
| style="text-align:right" | ~1,000 companies
| style="text-align:right" | 600+ (Jun 2023)
| <ref name="bpifrance"/><ref name="newsassurances_pme"/>
|-
| Headcount
| Headcount || style="text-align:right" | 25 (Aug 2023) || style="text-align:right" | —
| style="text-align:right" | 25 (Aug 2023)
| style="text-align:right" | —
| <ref name="bpifrance"/>
|-
| Max per-risk capacity
| Max per-risk capacity || style="text-align:right" | €5M per company || style="text-align:right" | €2M (Jun 2023)
| style="text-align:right" | €5M per company
| style="text-align:right" | €2M (Jun 2023)
| <ref name="capacites"/><ref name="newsassurances_pme"/>
|-
| Loss ratio
| style="text-align:right" | —
| style="text-align:right" | —
| —
|-
| Revenue
| style="text-align:right" | —
| style="text-align:right" | —
| —
|-
| Net income / net loss
| style="text-align:right" | —
| style="text-align:right" | —
| —
|-
| MGA commission rate
| style="text-align:right" | —
| style="text-align:right" | —
| —
|}
 
📝 '''Data integrity note.''' The €10M and €22M premium figures are company-reported,presented drawn fromby Dattak's as part of its own blog summary of a third-party interview thatnot coulddirectly notaccessible beat directlytime accessedof duereview toand publishershould accessbe controlstreated atas timecompany-reported ofuntil reviewindependently corroborated.<ref name="dattak-interview"/>
 
{{Section separator}}
== Competitive positioning ==
 
🏆 '''Disclosed differentiators.''' Within the cyber insurtech MGA ecosystem, Dattak's competitive positioning rests on four primary pillars. First,: an integrated incident response capability builtanchored around a dedicated internalby CERT-DATTAK with rapid engagement and formal RFC 2350 documentation.<ref name="dattak-cert"/> Second,; bundled prevention and cyber tooling (attack surface monitoring, phishing simulation, audits,) and amarketed platformas exclusive to insureds — designed to reduce claim frequency and severity.<ref name="dattak-cyberattack"/> Third,; a trajectory of capacity scalingarchitecture anddesigned upwardfor segmentprogressive migrationscaling throughinto successive increases in perlarger-riskcompany capacitysegments; and revenue ceilings from 2023 onward.<ref name="newsassurances-grosses-pme"/> Fourth, adjacency expansion into professional liability for the technologytech and services sector via thea combined Cyber + RC Pro contract.<ref name="dattak-rc-procert"/><ref name="cyberattack"/><ref name="rcpro"/>
 
🌐🔎 '''Peer context.''' NamedDattak peersoperates inwithin thea broader cyber insurtech MGA landscapeecosystem includealongside peers such as At-Bay, Baobab Insurance, BOXX Insurance, Coalition, Cogitanda, Converge Insurance, Corvus Insurance, Cowbell, Elpha Secure, Emergence Insurance, Evolve MGA, Eye Security, Invision Cyber, Measured Analytics and Insurance, Onda, Pera, Resilience, SafeInside Insurance, Stoïk, and Sync Underwriting.<ref name="seed_pr"/><ref name="cyberattack"/>
 
{{Section separator}}
== Risk factors ==
 
⚠️ '''Capacity dependency.''' Dattak's model is fundamentally dependentreliant on continued delegated capacity from its carrier and reinsurance panel. While multiple partners are displayed, the specific binding authority terms, renewal corridors, and performance triggers are not publicly disclosed.<ref name="dattak-carrier-logoscarriers"/>
 
🌊🌐 '''Systemic cyber exposure.''' Expansion into larger-company segments and explicit coverage of business interruption and, IT outages/, and provider failures increases correlation risk under systemic cyber events, absentparticularly robustif reinsurance protections and accumulation controls are not proportionally scaled.<ref name="dattak-panne"/>
 
💸💣 '''Ransomware governance.''' Ransom payment coverage is publicly claimedmarketed, but the absence of disclosed wording constraints, sanctions screening mechanisms, and sublimits in public materials leavespresents a diligencegovernance transparency gap.<ref name="newsassurances-ranconsransomware"/>
 
📜 '''Regulatory tighteningrisk.''' As a broker and underwriting agency under ACPR supervision and ORIAS registration, any tightening of intermediary conduct, disclosure, or delegated authority oversight requirements could affectimpact economics and increasedistribution channel friction in the broker channel.<ref name="dattak-legal"/>
 
✈️ '''GeographicExpansion execution risk.''' Cross-borderGeographic expansion tointo Belgium and Luxembourg introduces cross-border execution risk in distribution onboarding challenges, claims servicing logistics, and local market competition. Moving into professional liability changes claim patterns, tail risk profiles, and staffing requirements, particularly at the €10M RC Pro limit marketed.<ref name="dattak-belgiquebelgium"/><ref name="rcpro"/>
 
📑 '''Product expansion risk.''' Moving into professional liability changes claim patterns, tail risk profile, and staffing requirements for underwriting and claims expertise, particularly at RC Pro limits of up to €10M.<ref name="dattak-rc-pro"/>
 
{{Section separator}}
== Strategic trajectoryoutlook ==
 
🎯🚀 '''StatedGrowth ambitions.''' Across investor and company communications, Dattak's strategic directiontrajectory iscenters consistent:on building a European leadership position in cyber insurance combined with cybersecurity tooling;<ref, name="bpifrance"/>continuing continuedto scalingscale through broker distribution emphasisingwith fast digital subscription and embedded services;.<ref name="dattak-seed-prbpifrance"/> expansion into larger client segments via increased capacity and higher revenue ceilings;<ref name="newsassurances-grosses-pme"/> and diversification of the product set into liability and financial lines for technology and services companies through the RC Pro and combined contract.<ref name="dattak-rc-proseed_pr"/>
 
📐 '''Segment and product expansion.''' The roadmap includes further expansion into larger client segments via increased capacity and higher revenue ceilings, alongside diversification of the product set into liability and financial lines for tech and services through the RC Pro and combined offerings.<ref name="rcpro"/><ref name="newsassurances_pme"/>
❓ '''Open diligence questions.''' Key undisclosed areas include the full binding authority structure (carriers, syndicates, reinsurers, quota share versus excess of loss, aggregate limits, corridor triggers, cancellation and non-renewal rights); loss performance metrics (frequency, severity, net loss ratio, ransomware claim rate, claims cycle time); ransom governance procedures (sanctions screening, OFAC/EU compliance workflows, negotiation vendors, last-resort criteria in actual wording);<ref name="newsassurances-rancons"/> local intermediary registrations and fronting arrangements for Luxembourg and Belgium;<ref name="dattak-belgique"/> and the separation of economics between MGA commission and cybersecurity services margin.<ref name="dattak-carrier-logos"/>
 
{{Section separator}}
Line 149 ⟶ 228:
 
{| class="wikitable sortable" style="width:100%; font-size:0.85em"
|+ 📅 Dattak S.A.S. — timeline of key corporate and product events, 2021–2025December 2021 to November 2025
! scope="col" style="text-align:center; width:7em" | Date
! scope="col" style="text-align:center" | Event
|-
| December 2021
| 1 Dec 2021 || Company creation date in the official French registry.<ref name="annuaire-dattak"/>
| Company creation registered in the French official business directory.<ref name="annuaire_dattak"/>
|-
| June 2022
| Jun 2022 || Seed round of €7M led by XAnge; business angels including Bébéar; partnership with Wakam to carry risk; launch of broker-first digital process.<ref name="dattak-seed-pr"/>
| Seed round of €7M led by XAnge; business angels including Bébéar; partnership with Wakam to carry risk; broker-first digital process launched.<ref name="seed_pr"/>
|-
| October 2022
| Oct 2022 || Couallier described as Télécom Paris graduate; receives "femme cyber 2022" trophy at Campus Cyber.<ref name="dattak-femme-cyber"/>
| Couallier recognized with "femme cyber 2022" trophy at Campus Cyber.<ref name="femme_cyber"/>
|-
| June 2023
| Jun 2023 || Move up-market to €75M–€200M revenue clients; max capacity increased to €2M; over 600 clients claimed.<ref name="newsassurances-grosses-pme"/>
| Up-market move to €75M–€200M revenue clients; max capacity increased to €2M; 600+ clients claimed.<ref name="newsassurances_pme"/>
|-
| August 2023
| Aug 2023 || Series A of €11M; total funding reaches €18M; team of 25; approximately 1,000 clients claimed; Couallier becomes CEO/PDG.<ref name="bpifrance"/>
| Series A of €11M; cumulative funding reaches €18M; team at 25 employees; approximately 1,000 clients; Couallier becomes CEO/PDG.<ref name="bpifrance"/>
|-
| February 2024
| Feb 2024 || Capacity expanded to €5M per company; target companies up to €500M revenue; partners cited include Wakam, SCOR, and Envelop.<ref name="dattak-capacites"/>
| Capacity expanded to €5M per company; target companies up to €500M revenue; partners cited include Wakam, SCOR, and Envelop Risk.<ref name="capacites"/>
|-
| March 2024
| Mar 2024 || Partnership with DGA and adoption of RMC framework (with ANSSI collaboration); BITD scope and direct subscription claim.<ref name="dattak-dga"/>
| Partnership with Direction générale de l'armement and adoption of RMC framework with ANSSI collaboration; BITD scope and direct subscription claim.<ref name="dga"/>
|-
| September 2024
| Sep 2024 || Sompo partnership expands coverage to companies up to €1bn revenue.<ref name="commercialrisk-sompo"/>
| Sompo partnership expands coverage to companies with up to €1bn revenue.<ref name="sompo"/>
|-
| June 2025
| Jun 2025 || Launch of combined Cyber + RC Pro offer for tech; disclosed limits and underwriting simplification thresholds.<ref name="dattak-rc-pro"/>
| Launch of combined Cyber + RC Pro offer for tech sector; disclosed limits and underwriting simplification thresholds.<ref name="rcpro"/>
|-
| July 2025
| Jul 2025 || Belgium expansion announced; BeLux expansion lead named.<ref name="dattak-belgique"/>
| Belgium expansion announced; BeLux expansion lead named.<ref name="belgium"/>
|-
| September 2025
| Sep 2025 || CERT RFC 2350 document v1.2 published.<ref name="cert-rfc2350"/>
| CERT RFC 2350 document v1.2 published.<ref name="rfc2350"/>
|-
| November 2025
| Nov 2025 || IT outage and provider failure coverage explicitly framed as included.<ref name="dattak-panne"/>
| IT outage and provider failure coverage explicitly framed as included in the cyber contract.<ref name="panne"/>
|}
 
{{Section separator}}
== See also ==
* [[Cyber insurtech MGAs and underwriting agencies]]
 
{{Section separator}}