- Signatory of the Sustainable IT Charter
- Signatory of the Responsible AI Charter
Small/Medium-sized Enterprises (10 to 250 employees)
IT, telecoms
30 contributors
Saint-Mandé, France
contact@dastra.eu
Presentation
À l’ère de la donnée et de l’intelligence artificielle, la protection de la vie privée et la conformité réglementaire sont devenues des enjeux stratégiques pour les entreprises et les organisations publiques. Afin de leur permettre de répondre efficacement aux exigences européennes, Dastra édite une plateforme SaaS tout-en-un dédiée à la conformité au RGPD et à l’AI Act. Intuitive et innovante, la solution s’adapte à tous les secteurs d’activité et à toutes les tailles d’organisation en leur offrant un pilotage centralisé et maîtrisé de l’ensemble de leurs obligations en matière de protection des données et de gouvernance des systèmes d’IA.
Avec plus de 5 000 entités clientes en France et en Europe, Dastra s’impose comme un acteur de référence de la conformité numérique. Sa technologie, enrichie par l’automatisation intelligente et l’intelligence artificielle, permet aux délégués à la protection des données et aux responsables conformité de gagner en moyenne 80 % de temps dans la gestion de leurs activités : registres de traitements, cartographies des flux, analyses d’impact, demandes de droits, inventaires de systèmes d’IA et évaluations des risques.
Entreprise française, Dastra s’inscrit pleinement dans une démarche de numérique responsable. La plateforme contribue à renforcer la transparence, la responsabilité et la confiance dans l’usage des données et des technologies, en accompagnant ses clients vers une gouvernance éthique, durable et respectueuse des droits fondamentaux.
Planned commitments and actions
- Raise awareness on Sustainable IT (e.g. information workshop, MOOC, dissemination of good practice guides)
- Enter a Sustainable IT labelling initiative
- Organise a Digital Cleanup Day
- Establish a Sustainable IT Working Group within the organisation
- Communicate to its stakeholders on the actions taken
- Implementing data governance of your organisation and GDPR compliance or by following the principles of the GDPR in compliance with locally applicable data protection rules locally applicable data protection rules for other countries
- Deployment of a security plan for its digital environments (antivirus, VPN, supplier audits, permanent monitoring)
- Evaluate the robustness of its infrastructures (regular tests) and prioritise European infrastructures
- Manage my fleet with an inventory by category
- Measure the lifespan of my equipment by type
- Favour the purchase of sustainable equipment (reparability and durability criteria)
- Engage with actors in the reuse sector and/or the social and solidarity economy in the management of the end-of-life of my equipment
- Integrate environmental requirements in my calls for tender and establish a dialogue and measurement elements over the duration of the service with my suppliers
- Ensuring that its suppliers and service providers comply with their GDPR requirements or follow the principles of the GDPR in compliance with locally applicable data protection rules for other countries, environmental, social and diversity
- Encourage diversity among my service providers, particularly in relation to disability issues
- Use start-ups, associations and sustainable innovation projects to meet my needs for products and services, and participate in the structuring and improvement of these sustainable offers and services
- Measure the energy consumption and impact of my Information System (multi-criteria analysis)
- Avoid unnecessary energy consumption e.g. by switching off at night, weekends and holidays
- Favouring low-impact energy sources
- Plan the archiving and cleaning of data with its teams to reduce their environmental footprint
- Measure the impact of its digital services (e.g. frequency of use or energy consumption) using a multi-criteria and global approach to the entire service (equipment, servers, networks, etc.)
- Ensure the development of useful and efficient digital services
- Reduce the environmental impact of its services: weight of images, videos, plugins, by favouring simpler or less energy-consuming solutions
- Make its digital services accessible to as many people as possible (even in the event of poor connection quality, disability, etc.)
- Facilitate the proper semantic understanding of its digital services in a clear and educational language
- Ensure diversity in the recruitment of IS teams (initial and continuing training, diversity of training, origins, disability status)
- Encourage gender diversity in the digital field at all levels
- Promote work-life balance by, for example, respecting the right to disconnect and arranging for teleworking measures
- Making anonymised data available to enable the development of innovative services that can benefit users and citizens
- Favour the use of local and European tools in order to encourage the consolidation of players who respect the sovereignty of European data
- Develop in open source to enable virtuous emulation of its ecosystem
- Participate in or encourage the co-construction/experimentation of Tech4Good
Actions started
- Raise awareness on Sustainable IT (e.g. information workshop, MOOC, dissemination of good practice guides)
- Enter a Sustainable IT labelling initiative
- Organise a Digital Cleanup Day
- Establish a Sustainable IT Working Group within the organisation
- Communicate to its stakeholders on the actions taken
- Implementing data governance of your organisation and GDPR compliance or by following the principles of the GDPR in compliance with locally applicable data protection rules locally applicable data protection rules for other countries
- Deployment of a security plan for its digital environments (antivirus, VPN, supplier audits, permanent monitoring)
- Evaluate the robustness of its infrastructures (regular tests) and prioritise European infrastructures
- Manage my fleet with an inventory by category
- Measure the lifespan of my equipment by type
- Favour the purchase of sustainable equipment (reparability and durability criteria)
- Engage with actors in the reuse sector and/or the social and solidarity economy in the management of the end-of-life of my equipment
- Integrate environmental requirements in my calls for tender and establish a dialogue and measurement elements over the duration of the service with my suppliers
- Ensuring that its suppliers and service providers comply with their GDPR requirements or follow the principles of the GDPR in compliance with locally applicable data protection rules for other countries, environmental, social and diversity
- Encourage diversity among my service providers, particularly in relation to disability issues
- Use start-ups, associations and sustainable innovation projects to meet my needs for products and services, and participate in the structuring and improvement of these sustainable offers and services
- Measure the energy consumption and impact of my Information System (multi-criteria analysis)
- Avoid unnecessary energy consumption e.g. by switching off at night, weekends and holidays
- Favouring low-impact energy sources
- Measure the impact of its digital services (e.g. frequency of use or energy consumption) using a multi-criteria and global approach to the entire service (equipment, servers, networks, etc.)
- Ensure the development of useful and efficient digital services
- Reduce the environmental impact of its services: weight of images, videos, plugins, by favouring simpler or less energy-consuming solutions
- Make its digital services accessible to as many people as possible (even in the event of poor connection quality, disability, etc.)
- Facilitate the proper semantic understanding of its digital services in a clear and educational language
- Ensure diversity in the recruitment of IS teams (initial and continuing training, diversity of training, origins, disability status)
- Encourage gender diversity in the digital field at all levels
- Promote work-life balance by, for example, respecting the right to disconnect and arranging for teleworking measures
- Making anonymised data available to enable the development of innovative services that can benefit users and citizens
- Favour the use of local and European tools in order to encourage the consolidation of players who respect the sovereignty of European data
- Develop in open source to enable virtuous emulation of its ecosystem
- Encouraging territorial innovations by testing and deploying social and environmental digital products and services
- Participate in or encourage the co-construction/experimentation of Tech4Good