About us
Two engineers, not a consultancy
DASKALOS APPS is a small French engineering company. Who we are, what we have shipped, and the rules we work by.
Updated 7 September 2026
Who we are
DASKALOS APPS SAS is a French engineering company, founded in May 2024, based in Péronnas in the Ain, with a co-founder in Greece. We build software products. We also help other companies get set up for the Cyber Resilience Act.
Help is the right word for it. We advise, we propose the changes, we write the documents with you and we show your team how to keep them going — including the monitoring, which we set up in an account you own and then hand over. You remain the manufacturer: the decisions, the declaration, the watching and the reports stay yours, because the law puts them there and no contract can move them.
We can do the whole of that for a company of fifteen people because software does the expensive parts. Lowering what compliance costs a small manufacturer is the point of this product, not a side effect of being small ourselves.
We are engineers. We are not a certification body, a law firm, or a consultancy that sells questionnaires, and we do not pretend to be. We work with companies of fifteen to a few hundred people that make something real, in any country the law reaches — including companies outside the EU that sell into it.
The founders
We both hold doctorates in computational aerodynamics and structural dynamics, taken in the same field in 2014. That is not a security qualification and we do not pretend otherwise. What it gave us is the habit the job actually needs: modelling something properly, testing it, and writing down the evidence so somebody else can check it. A technical file is that, with a deadline attached.
Andrew John McCracken, president and CTO
Writing software since 2010, when he started his doctorate — most of it data-heavy platforms and cloud infrastructure. Andrew writes the code that changes your build, owns the architecture, and signs every document before it reaches you. He is based in Péronnas, in the Ain.
Nikolaos Tantaroudas, co-founder
Based in Greece, and the person who has run our side of five European research consortia — the proposals, the coordination and the reporting that goes with public money. Nick takes the first conversation, the scoping and the delivery for customers in Greece and south-east Europe. Most of that is in writing; when a call is the better way to settle something, he is the one on it.
What we have shipped
Five Horizon Europe projects, each with consortium partners across the EU and each with software that went out of the door: VOXReality, UTTER, CORTEX2, ResilMesh and PoliRuralPlus. Seven peer-reviewed papers came out of that work, and two of them are about the security platform this product is built from.
On security, specifically. SentinelSphere: an AI-driven cybersecurity platform integrating real-time threat detection with security awareness education, in Open Research Europe, and the same work at the 21st International Conference on Cyber Warfare and Security. That platform is where the scanners, the feeds and the review queue behind this service came from.
The rest of the seven are on accessible and multilingual software built in those projects: INTERACT, on real-time sign language translation, and XR-CareerAssist, both in Open Research Europe, and three papers at the International Conference on Extended Reality in 2025.
Before that, Andrew's work was in computational aerodynamics — the Journal of Aircraft, the International Journal of Computational Fluid Dynamics and the AIAA conferences — and Nick's in aeroelasticity and reduced-order modelling, where he wrote a chapter of Advanced UAV Aerodynamics, Flight Stability and Control (Wiley). Neither is relevant to your product. Both are why we write things down properly.
The full lists are public: Andrew and Nick.
Then SentinelSphere, our own security analytics product. The platform behind this service is built from its parts, and SentinelSphere was the first product we put through the work we now sell. The result is on the proof page.
How we work
Mostly in writing.
You do your part when it suits your week and we do ours. Briefs, drafts and approvals go back and forth in writing; calls are booked in daytime Paris hours for the things writing does badly. Written questions get an answer within one working day. We are two engineers, not a service desk: nobody here is on call, and we do not watch anybody's product.
English, everywhere the law reaches.
Our documents, our platform and our support are in English, which is what lets us charge one price and work the same way in every affected country, inside the EU and outside it. We can talk in French or Greek.
Everything stays in Europe.
The platform runs in Paris. Your code and your evidence do not leave the EU.
Facts come from tools, words come from engineers.
Whether the law covers you, which group your product is in, how serious a finding is and which deadline applies are worked out by rules we publish. A model never decides any of them.
A person signs everything.
No document reaches you without a named reviewer behind it, and there is no exception. We send no automated warnings, because we do not watch anybody's product: the monitoring we set up runs in your account and alerts your own people.
We never train on your code.
Not us, and not our providers, who are under the same terms.
Who we bring in
We hand over the work we do not do: a law firm for legal review and declarations, and a penetration-testing firm. [PARTNER NAMES TO CONFIRM]
For products in the stricter groups we tell you what the route involves and stop there. We are not a certification body, and when this page was written no independent body had yet been listed for this law, so nobody can introduce you to one.
If your company is outside the EU, you may want a representative inside it. A manufacturer may appoint an authorised representative in the Union by written mandate; the Regulation does not oblige non-EU manufacturers to appoint one.[Art. 18] We are not one, cannot act as one, and will not be named in a mandate — but we can introduce a provider who does that for a living. What is on the pricing page is what appears on your contract, and it is the same euro price wherever you are.
Company details
DASKALOS APPS SAS, SIREN 928 998 715, registered with the RCS of Bourg-en-Bresse. Share capital, VAT number and postal address are on the legal notice page.
Talk to an engineer
Thirty minutes with one of the two of us, not a salesperson. Or write instead, and we answer within one working day.