Controlled hosting · Data protection by design · Full audit log French publisher · EU-hosted · GDPR by design European publisher · EU-hosted · GDPR by design

CMMS for the public sector: tracked, auditable, no tender requiredGDPR-compliant, sovereign, no tender requiredGDPR-compliant, sovereign, no tender required.

A CMMS built for the technical services of town halls, intermunicipal authorities, regional councils and public care homes. Controlled hosting, embedded maintenance AI assistant,Hosting in France and the EU, French AI (Mistral),Hosting in the EU, European AI (Mistral), full audit log, Free and Starter plans buyable outside public tenders. Residents flag, officers act, elected officials track.

Controlled hostingHosted in France & the EUHosted in the EU No commitment Documented reversibility

Brifay is a CMMS designed for public sector bodies — town halls, intermunicipal authorities, regional councils, public care homes, schools — that want to run maintenance on their assets and real estate portfolio with data protection by designwithout stepping outside the GDPR perimeterwithout stepping outside the GDPR perimeter. Controlled hosting, embedded AI assistant dedicated to maintenance, full audit log, granular RBAC (30+ permissions), contractual reversibility. Free plan and Starter plan (EUR 9 per agent per month) buyable outside public tenders below the direct-award threshold.French publisher, data hosted in France and the EU, Mistral AI (French model), full audit log, RBAC with 30+ permissions, contractual reversibility. Free plan and Starter (EUR 9 per agent per month) buyable outside public tenders.European publisher, data hosted in the EU, Mistral AI (European model), full audit log, RBAC with 30+ permissions, contractual reversibility. Free plan and Starter (EUR 9 per agent per month) buyable outside public tenders.

Scope

Which CMMS for a town hall or local government?

A public sector scope is not an industrial SME scope. A town hall, a community of communes or a regional council juggle several maintenance domains in parallel — often with a small, multi-skilled technical team.

Public buildings

Town hall, multipurpose halls, sports halls, changing rooms, media library, public care home. Heating, plumbing, electrics, regulatory checks (fire, lifts, defibrillators).

Schools and after-school

Pre-schools, primary schools, after-school clubs, canteens. Kitchen equipment, playground gear, sanitary fixtures, classrooms. Headteacher requests centralised in one place.

Sports and assets

Stadiums, swimming pools, tennis courts, parks, street furniture. Seasonal preventive plans, requests from user associations, maintenance scheduling.

Technical roadways

Street lighting, signage, panels, lamp posts, fountains, road furniture. Resident reports, geolocation on a map, tracking of vendor interventions.

The Brifay hierarchy supports 7 levels of depth — municipality > division > site > building > floor > room > asset — which covers the structure of an intermunicipal authority down to the city-centre care home. You start with two or three levels and go deeper as you go. See details in the features page and the CMMS comparison.

Compliance

How do you protect data with a public sector CMMS?How do you respect GDPR with a public sector CMMS?How do you respect GDPR with a public sector CMMS?

Data protection imposesGDPR imposesGDPR imposes four concrete obligations on any public body for a management tool: controlled hosting, vendor governance, data subject rights, traceability. Brifay covers the four by default, not by amendment.

1. Controlled hosting

Servers and databases in a controlled hosting zone. Documented data residency. No uncontrolled data transfer. Servers and databases in France and the EU. No transfer to the United States. Outside the scope of the CLOUD Act — a point flagged by CNIL for public sector processing. Servers and databases in the European Union. No transfer to the United States. Outside the scope of the CLOUD Act — a point flagged by European supervisory authorities for public sector actors.

2. Controlled AI policy

The Brio AI is an embedded assistant dedicated to maintenance. Your data is never used to train third-party models (firm contractual clause). Disable by role or per tenant if a resolution requires it. Brio AI runs on Mistral, a French model. Your data is never used to train third-party models (firm contractual clause). Disable by role or per public body. Brio AI runs on Mistral, a European model. Your data is never used to train third-party models (firm contractual clause). Disable by role or per tenant.

3. Data subject rights

Access, rectification, erasure, portability, objection. Data subject rights are implementedGDPR rights are implementedData subject rights are implemented inside the administrator interface — not through a support ticket. Requests from residents and staff are traceable.

4. Full audit log

Every action is timestamped and attributed to a user: creation, modification, deletion, sensitive read, export. Essential in case of a regulator auditof a CNIL auditof a data protection authority audit or litigation. Retention according to the applicable legal duration.

The detail of commitments (DPA, subprocessors, register, technical measures) is documented on the dedicated Security & data protectionSecurity & GDPRSecurity & GDPR page — to share with your data protection officerDPODPO before opening the account.

Public procurement

Is Brifay compatible with public procurement?

Yes, in three forms depending on annual purchase amount and scope. Honestly: Brifay is not yet listed on UGAP — here are the available routes to date.

Under EUR 40,000 (excl. tax) per year

Direct award, with no advertising or competitive bidding (article R.2122-8 of the Public Procurement Code). The Free plan stays free; the Starter plan at EUR 9 per agent per month covers a town hall of 3,000 to 5,000 residents under this threshold.

Between EUR 40,000 and 90,000 (excl. tax)

Simplified public procurement procedure (MAPA): three quotes are enough. Brifay provides on request a standard response file (technical brief, certificates, DPA) to speed up the drafting of the documents.

Above

Formal adapted procedure or dedicated framework agreement. Brifay helps draft the technical specifications with the supporting documents (architecture, security, data protectionGDPRGDPR, SLA). Pro (EUR 29) and Business (EUR 59) plans fit intermunicipal authorities and regional councils.

For grouped buying needs (territorial purchasing agency, joint authority), the Business plan handles multi-tenant with centralised invoicing. To discuss a deployment above EUR 40,000 (excl. tax) yearly or a specific procedure, contact us — we send the documents within 48 business hours.

Roles and rights

Who can do what: officers, requesters, elected officials?

A public sector tool doesn't tolerate vague permissions. Brifay offers granular RBAC with more than 30 configurable permissions and preconfigured roles for the public sector.

Technical officers

Receive requests, process work orders, dictate their voice report on mobile, scan asset QR codes. Full access to their scope — school buildings, roads, sports — not to other divisions.

Internal requesters

Head teachers, caretakers, administrative staff, care home reception. File a request in a few clicks without needing the full software. Status tracking, notification when the work is done.

Residents

Shareable public form (link on the town hall website, QR on the asset). Residents flag an issue — lighting, bench, cleanliness — without creating an account. Free and unlimited on every plan, including Free.

Elected officials and leadership

Read-only access to dashboards: request volumes by district, average resolution time, annual cost per school. For the mayor, the works committee or the chief executive. No risk of accidental edits.

Roles are audit-logged and revocable instantly. On staff moves or a new mandate, you revoke and create without losing history. Details on the Features and Security & data protectionSecurity & GDPRSecurity & GDPR pages.

Pricing

What does a CMMS cost for a municipality of X residents?

The benchmarks below build on the technical officer / population ratio observed across public sector organisationsFrench local governmentlocal government. Adjust to your scope — a care home, a tourist resort or a rural municipality won't share the same structure.

Free — EUR 0

Up to 3 officers, unlimited internal requesters and residents, native mobile, core CMMS. A fit for a rural municipality or a service-level pilot phase.

Municipalities under 1,000 residents or pilots.

Starter — EUR 9

Without the 3-officer cap, core Brio AI, exports, advanced views. Buyable by direct award for most town halls.

Town halls 1,000-5,000 residents.

Pro — EUR 29

Advanced Brio AI, predictive alerts, analytics, automations. The most relevant plan for mid-sized municipalities and intermunicipal centre towns.

Municipalities 5,000-50,000 residents.

Business — EUR 59

Multi-site, multi-tenant, SSO, advanced audit log, priority support. Designed for intermunicipal authorities, regional councils and joint public bodies.

Intermunicipal & regional councils.

Prices excluding tax, per internal officer per month. Internal requesters and residents stay free and unlimited on every plan. Full breakdown: Pricing page.

Frequently asked questions

The 8 questions public technical services ask.

Where is public sector data hosted?Is Brifay a French or European publisher?Is Brifay a European publisher?

Brifay relies on controlled hosting with documented data residency. The embedded AI (Brio) is an assistant dedicated to maintenance. Your data is never used to train third-party models (firm contractual clause) and the data location is set out in the contractual commitments shared before the account is opened.Brifay is a French publisher whose servers and database are hosted in France and the European Union. The embedded AI (Brio) runs on Mistral, a French model. No local government data leaves the EU, which places the tool outside the scope of the US CLOUD Act — a point regularly flagged by CNIL for public sector processing.Brifay is a European publisher whose servers and database are hosted in the European Union. The embedded AI (Brio) runs on Mistral, a European model. No local government data leaves the EU, which places the tool outside the scope of the US CLOUD Act — a point flagged by European supervisory authorities for public sector processing.

Is school and educational services data protected?

Yes. Brifay applies data protection by design: encryption,Brifay applies GDPR by design: hosting in France & the EU, encryption,Brifay applies GDPR by design: EU hosting, encryption, user rights (access, rectification, erasure, portability), processing register and full audit log. AI can be disabled by role or per tenant, and the organisation's data is never used to train third-party models — firm contractual clause. See the SecuritySecurity & GDPRSecurity & GDPR page for details.

Can Brifay connect to our asset management system or ERP?

Yes. Brifay exposes a documented REST API and accepts CSV imports for the real estate portfolio, assets and staff. Integration with HRIS, asset management systems or financial ERP is possible via API or scheduled exports. For specific connectors to public sector publishers, contact us: the roadmap is built with our first public sector customers.

Is Brifay listed on UGAP or a public purchasing agency?

Not yet. Brifay is not listed on UGAP (the central public purchasing agency) or the State purchasing platform to date. The Free plan and the Starter plan (at EUR 9 per agent per month) remain buyable outside public tenders for annual amounts below the direct-award threshold of EUR 40,000 (excluding tax). For wider deployments, a simplified public procurement procedure (MAPA) or a dedicated framework agreement is workable — we help draft the documents on request.

How do I train my technical and administrative staff?

The mobile app is designed for immediate field use: QR scan, voice dictation, photos. For most staff, a 15-minute demonstration is enough to create a first request. For leads, a one-hour onboarding covers site hierarchy, RBAC roles and preventive maintenance. Online documentation and email support are included on every plan.

What about reversibility if the public body leaves Brifay?

You retrieve all your data at any time via CSV export or the API: assets, sites, requests, interventions, photos, history. Brifay commits contractually on an export timeframe and on data deletion after a reasonable notice period. This reversibility is a prerequisite for any public sector processingimposed by CNIL for any public sector processingfor any public sector processing — it is documented in our terms and on the SecuritySecurity & GDPRSecurity & GDPR page.

Can residents flag issues online?

Yes, through a public request form (link shared on the town hall website or QR code on the asset itself). The resident describes the problem — street lighting, road, broken bench — without creating an account. The request lands directly in the queue of the right officer. Anonymous or identified requesters are free and unlimited on every plan, including Free.

Who can do what across officers, requesters and elected officials?

Brifay offers granular RBAC with more than 30 configurable permissions. Technical officers create and process work orders, requesters (residents or non-technical staff) file requests, elected officials access a read-only mode with dashboards. Roles are preconfigured for the public sector — town hall, intermunicipal authority, care home — and adjustable as needed.

Test the CMMS on your own scope, with no commitment.

The Free plan qualifies as direct award (since it's free), so it doesn't touch your public procurement budget. You create an account, you import a few pilot assets — a street's lighting, the sports hall, a school — and you evaluate the tool on your own flows. If Brifay fits, you expand. If not, you stop at no cost.

Preparing a procurement procedure? Write to us — we send the technical brief, DPA and certificates within 48 business hours. Want to see the SME angle or how Brio works first? They are right there.