A managing director running a security SME with 80 officers on duty faces the same impossible equations every week: how to schedule 35 shifts across 15 sites while complying with mandatory 11-hour rest periods, the CCN 3196 wage coefficients, and each officer’s SSIAP qualifications — and still get client invoices out before the 5th of the month? In France, the answer almost always involves an Excel spreadsheet, sometimes basic scheduling software, and rarely an integrated sector-specific ERP.
Yet with payroll representing 70 to 80 % of revenue and net margins capped at 2 to 3.7 %, every hour of sub-optimal scheduling or unbilled shift costs more than it earns. Generic ERPs (Sage, Cegid, Odoo) have no concept of a CCN 3196 coefficient 150, do not alert when a CNAPS professional licence expires, and cannot generate automatic per-shift billing.
This guide covers the sector’s specific regulatory constraints, the modules a purpose-built ERP must cover, and the solutions currently available in the French market in 2026.
1. A Labour-Intensive Sector with Tight Margins
The French private security industry generated €11.12 billion in revenue in 2023, up 16.3 % from 2022 and more than double the 2010 figure, according to sector data compiled by Lead Advisor. Manned guarding (patrol, concierge security, event security) alone accounts for 66 % of that figure, or roughly €7.3 billion.
The market is highly concentrated: 12,545 companies under NAF code 8010Z employ 210,500 workers, but 43 companies with more than 500 employees account for 52 % of total revenue. The vast majority of operators are micro-businesses and SMEs with fewer than 20 staff, serving local clients on hourly-rate contracts with continuous HR logistics.
Two economic realities demand rigorous management: payroll represents 70 to 80 % of revenue, and net margins do not exceed 2 to 3.7 % (compared with 19.1 % for electronic security system companies). At those levels, a four-hour shift invoiced instead of six, a missed night supplement, or an unqualified officer sent to a SSIAP 2 post translates directly into a net loss on the contract.
Staff Turnover: The Main Operational Challenge
The sector records a hiring rate of 92 % and a departure rate of 88 % of annual headcount, meaning a company of 100 officers must manage roughly 90 new hires and 88 departures every year. This turnover demands reactive HR management: near-daily pre-employment declarations (DPAE) and constant tracking of professional licence validity. In 2024, CNAPS issued 88,000 professional licences — a record driven by demand from the Paris Olympic Games, according to analysis published on 83-629.fr.
2. Regulatory Constraints That Define the ERP Choice
2.1 The CNAPS Professional Licence: A Permanent Obligation
CNAPS (Conseil National des Activités Privées de Sécurité) is the French public authority that regulates the private security industry. Every officer carrying out security activities must hold a valid professional licence, issued after a criminal record check and the required vetting.
A purpose-built ERP must track each licence’s expiry date, send alerts well in advance (ideally 60 to 90 days), and block the assignment of an officer whose licence has lapsed. A generic ERP has no such feature natively — it must be built manually into a custom field, with human oversight that becomes unmanageable beyond a few dozen officers.
CNAPS has stepped up enforcement since 2024: financial penalties rose 40 % in a single year, reaching a total of €3.9 million, according to sector data. The risk of deploying an officer without a valid licence is no longer theoretical.
2.2 CCN 3196 (IDCC 1351): A Non-Standard Collective Agreement
The French national collective agreement for prevention and security companies carries the reference IDCC 1351 (Brochure JO 3196). It defines a wage coefficient scale ranging from 130 for basic security officers up to higher levels for supervisors and managers, with specific supplements for night shifts (from 21:00), Sundays, public holidays, and standby shifts.
An ERP that does not know this scale cannot pre-calculate payroll automatically from the schedule. Managers must re-enter supplements manually, with all the associated error risk. On a volume of 200 shifts per month, even a 2 % error rate generates thousands of euros in employment disputes.
2.3 The 6-Hour Minimum Shift: A Structural Reform in Force Since July 2026
Amendment No. 2 dated 3 September 2025 to the sector agreement of 1 April 2021, extended by ministerial order of 27 May 2026 published in the French Official Journal (JO) on 5 June 2026, set 6 hours as the minimum duration for any shift for operational staff and supervisors, with effect from 1 July 2026, according to DPSA Sécurité.
Direct consequences for billing and scheduling:
- Any shift shorter than 6 actual hours must be remunerated and billed on a minimum 6-hour basis
- Short event assignments (evenings, dinners, trade shows) of fewer than 6 hours must be repriced in quotes and contracts
- Work cycles with 4-hour posts are now non-compliant
- The rule applies to each independent shift, not to a daily cumulative total
An ERP that does not automatically enforce this minimum exposes the company to systematic under-billing or employment disputes. Exceptions cover airports with fewer than 850,000 annual passengers and occasional reinforcements in unscheduled time slots.
2.4 Factur-X and Chorus Pro: Electronic Invoicing for Public-Sector Clients
Many guarding companies have local authorities, hospitals, or public bodies in their client portfolio. Invoicing these entities must go through Chorus Pro, France’s public procurement dematerialisation platform. The expected format is Factur-X (a hybrid PDF/XML compliant with EN 16931) or UBL 2.1, with public contract data: commitment number, clearing service code, entity SIRET number.
An ERP that cannot generate these formats natively forces the administrative manager to re-enter data in a separate tool. Since 1 September 2026, all French VAT-registered businesses must also be able to receive electronic invoices, and mandatory issuance is rolling out on a phased schedule. See our overview of France’s mandatory e-invoicing rollout for the full compliance timeline.
3. The Six Core Modules of a Private Security ERP
3.1 Shift Scheduling with Automatic Controls
Scheduling is the heart of the specialist ERP. It must manage the following constraints in real time:
- Minimum 11-hour rest period between shifts (CCN 3196)
- Maximum 12-hour shift duration
- Minimum 6-hour shift since 1 July 2026
- Limit on Sundays worked per cycle
- Qualification/post compatibility (SSIAP 1, 2 or 3; CQP APS; valid CNAPS licence on the shift date)
A scheduler that does not verify these constraints automatically generates disciplinary risks (CCN breaches) and CNAPS risks (unqualified officer dispatched to site). Conflict detection must be visual, real-time, and happen before the schedule is confirmed.
3.2 Qualification and Accreditation Management
Each officer carries a competency profile: CNAPS professional licence (with expiry date), SSIAP qualifications (1, 2 or 3), first-aid certification (SST), driving licence for mobile patrol officers, H0B0 accreditation for industrial sites, and so on. A purpose-built ERP manages this profile and automatically blocks assignment to a post whose prerequisites are not met. Expiry alerts (licences, medical examinations, training renewals) must be configurable at 30, 60, or 90 days.
3.3 Payroll Pre-Calculation Integrated with Scheduling
The step from confirmed schedule to payroll pre-calculation must be automatic and require no re-entry: hours worked per shift, applicable supplements (night, Sunday, public holiday), CCN coefficient, meal allowance (minimum €4.36 since January 2025, per available sector data). The pre-payroll file is then exported to the payroll software used by the accounting firm or HR provider (Silae, ADP, Sage Paie, etc.) in a compatible format.
3.4 Billing and Margin Tracking by Site
Billing in private security is shift-by-shift: each assignment generates a billing line with actual hours, contractual supplements, and the negotiated hourly rate. A specialist ERP reconciles confirmed schedule and billing, produces Factur-X invoices for public-sector clients via Chorus Pro, and generates a margin table by site or by contract. This profitability report is essential to identify contracts below viability thresholds and renegotiate with full information.
3.5 Electronic Duty Log
The duty log (main courante) is the post’s operational record: officers log their rounds, incidents, interventions, access controls, and observations. In a specialist ERP it is paperless, timestamped, GPS-tagged, and accessible in real time by the operations manager. It constitutes auditable evidence in the event of a client dispute or site incident. Some public-sector clients now make electronic duty logs a mandatory requirement in tender specifications.
3.6 Officer Mobile App (Lone Worker Protection and GPS Check-in)
Officers have a smartphone app to view their schedule, clock in and out by GPS, complete the duty log directly from the post, and trigger a lone worker protection (PTI) alarm if they fall or remain motionless for an extended period. PTI has become a near-mandatory requirement in public-sector tenders. An ERP that does not include it natively must rely on a third-party tool, with the integration costs and data-synchronisation risks that entails.
4. Comparison of the Main Market Solutions
| Solution | Target size | Strengths | Points to verify |
|---|---|---|---|
| Hector Solution | SME | Native CCN 3196 and CNAPS compliance, France-hosted, €0 setup | Scalability for large organisations |
| BanetteOne | Micro, SME | From €99/month, 6-hour minimum, duty log | Scalability beyond 50 officers |
| GuardPro | Micro, SME | From €32.50/month no commitment, Chorus Pro, AI scheduling | Coverage of recent CCN amendments |
| SEKUR | SME | 4.8/5, full chain, 10 years of operation | Pricing to confirm |
| Comète | SME, mid-market | Advanced margin tracking and commercial management | Limited public reviews |
| Trackforce | Mid-market, group | 50+ countries, SOC 2, ISO 27001 | Cost and complexity for local SME |
Hector Solution
French SaaS hosted in France (OVH), GDPR-compliant. Hector integrates CCN 3196 scheduling, CNAPS and SSIAP qualification management, payroll pre-calculation, Factur-X billing, and a mobile app with PTI and GPS check-in. The company claims an 80 % reduction in administrative time for structures of 30 officers — around 11 hours saved per week on scheduling, payroll, and compliance checks. More at hector-solution.fr.
BanetteOne
Private security ERP positioned at the micro/SME segment, starting from €99/month according to banetteone.com. Scheduling with automatic enforcement of 48-hour weekly limits, 11-hour rest periods, and the 6-hour minimum shift (in force since July 2026), electronic duty log, billing, and HR in a single tool. Suited to businesses moving off spreadsheets without an integration budget.
GuardPro
French SaaS starting from €32.50/month, no commitment, per guardpro.app. CCN 3196-compliant scheduling, native PTI, Chorus Pro and Factur-X 2026, AI-powered schedule optimisation. Entry-level pricing for very small structures. The point to verify during a demo is coverage of recent CCN amendments, specifically Amendment No. 2 of September 2025 on the minimum shift duration.
SEKUR
French solution founded in 2015, rated 4.8/5 by its users according to sekur.fr. SEKUR covers the full chain: officer scheduling, mobile app, electronic duty log, PTI, payroll pre-calculation, billing, and margin tracking by contract. A decade of operation is a meaningful indicator of robustness on complex regulatory cases and successive CCN revisions.
Comète
A solution aimed at SMEs and mid-market operators, with a strong focus on margin tracking and commercial management: quoting, contract pipeline, site-level profitability dashboards. Comète integrates scheduling, payroll, HR, and commercial management in one tool. Well-suited to organisations that have already solved the scheduling problem and want to manage their contract portfolio more actively.
Trackforce
An international solution present in over 50 countries, certified SOC 2, NIST, ISO 27001, and GDPR. Trackforce targets mid-market and large security groups operating across multiple countries. French-specific compliance (CCN 3196, minimum shift rule, Chorus Pro) should be verified explicitly, as international platforms sometimes have less granular local adaptations than French-native publishers.
5. Choosing by Company Size and Profile
Fewer than 30 officers
The priority is to replace Excel and automate the scheduling/payroll/billing trio. GuardPro or BanetteOne offer a value-for-money ratio suited to this scale. The deciding criterion is native support for the 6-hour minimum shift and automatic rest-period enforcement, to avoid any CCN 3196 non-compliance risk from day one.
30 to 200 officers
Multi-site management and per-officer qualification traceability become critical. Hector Solution and SEKUR are positioned in this segment with comprehensive functional coverage. The electronic duty log and PTI must be in scope, as they are frequently required by public-sector clients in tender specifications.
200 officers and above, multi-region
The constraints shift to mid-market territory: consolidated multi-site reporting, interfaces with a group HRMS (ADP, Cegid Talentsoft, Silae), and potentially multi-collective-agreement compliance if the group spans activities beyond physical security. Comète or Trackforce come into scope. SAP or Oracle integration may be required for subsidiaries of large groups.
The question to ask systematically during any demo: “How do you handle Amendment No. 2 of 3 September 2025 on the 6-hour minimum shift? Is the check automatic in the scheduler or does it require configuration on our side?” The answer immediately reveals the vendor’s regulatory maturity and responsiveness to CCN 3196 changes.
For further reading, see our guide to ERP for field service management and workforce dispatch, our article on professional services and PSA staffing ERP, and our overview of France’s mandatory e-invoicing rollout.
