Faten Zerelli

Accompanied over twenty clients in six years, from startups post–fundraising to international groups under regulatory investigation. Design and deployment of compliance frameworks and governance Implementation of risk management methodologies (EBIOS RM, COSO ERM) Support for audit and certification processes: ISO 27001, ISO 27701, SOC 2, HDS, ACPR, eIDAS. Delivery of gap analyses, regulatory deliverables, and due diligence for investors and partners. Development of executive training and awareness programs to foster compliance-driven cultures.

Oversaw legal and compliance for a regulated player (QTSP), audited by ANSSI. Managed regulatory relationships and supported compliance requirements for a client portfolio including financial institutions, insurers, large corporates, and public sector entities.

Guiding healthcare and research players through GDPR, HDS certification, and CNIL/ANSSI requirements to protect sensitive data.

Supporting general management on regulatory compliance (ARS, HAS, data protection) and hospital information systems.

Helping internet service providers and hosting companies on compliance with the LCEN surveillance and cooperation obligations, including data retention requirements, notice-and-takedown procedures, and cooperation with judicial authority (OFAC) and European network (INHOPE).