papernest operates a platform handling sensitive personal and financial data at scale - electricity, gas, internet, mobile, insurance contracts, and more for over 2 million users across France, Spain, Italy, and the UK. The threat model is straightforward: the platform centralizes exactly the kind of data (account credentials, addresses, banking details, contract terms) that makes it a high-value target. Users hand over the keys to their household infrastructure, so the security posture needs to be airtight from contract ingestion through supplier API integrations spanning 200+ vetted partners.
Founded in 2015 and now running with a 950+ team, papernest has the scale of a mature operation but still carries the velocity of a French Tech 120 company. The technical stack sits at the intersection of digital platform development, contract management systems, and utility/subscription optimization - domains where data integrity and secure interconnection with third-party suppliers aren't optional. Every contract switch, cancellation, or optimization flow touches user data that needs to be handled with precision across multiple regulatory jurisdictions.
The company's independent, free-to-consumer model means trust is the product. With no direct cost to users, the platform's credibility hinges entirely on how well it protects the data it aggregates. Security engineering here isn't a perimeter problem - it's woven into the core of contract orchestration across utilities, telecoms, insurance, and moving services, making it a technically rich environment for anyone working to keep sensitive household data locked down at scale.
