CNAPS approval for a private security company director: the 2026 process

The director's CNAPS approval (article L612-6 of the internal security code) is requested from the CNAPS, which reviews the file and checks good standing, professional aptitude and, for foreign nationals, lawful residence. It is valid for 5 years and is a condition for directing, managing or being a partner of a private security company.

Many founders come to us with a project already well advanced (premises, client quotes, first recruitments), assuming it is enough to register the company. Yet without the CNAPS authorisations, the activity simply cannot start. Here is how we structure this aspect in our incorporation files.

Private security activities fall under Book VI of the internal security code (CSI), supervised by the CNAPS (National Council for Private Security Activities). This is not a single approval but three distinct and cumulative authorisations. This is the point that most often surprises founders.

Our reading: these three authorisations serve different purposes. The approval controls the person of the director, the authorisation controls the structure, the professional card controls each field agent. None exempts you from the others.

Article L612-6 sets out the principle: "No one may carry out, on an individual basis, an activity mentioned in article L. 611-1, nor direct, manage or be a partner of a legal entity carrying out that activity, unless they hold an approval issued in accordance with terms defined by decree of the Council of State."

The approval is subject to substantive conditions set by the code (notably articles L612-6 and L612-7). Presented qualitatively, they concern:

• good standing: compatibility of behaviour and antecedents with the activity, which involves a criminal record check;
• professional aptitude: evidence of a qualification;
• lawful residence, for foreign nationals.

The request is filed with the CNAPS, which reviews it and then issues the authorisation. The approval is valid for 5 years.

The underestimated risk: a director's antecedent can block the whole project, even where the company is sound and the funds are in place. We therefore raise this subject at the very first meeting, before any incorporation costs are committed.

The operating authorisation (article L612-9 et seq. of the CSI) concerns the structure itself: the legal entity or the sole trader. It is issued by the CNAPS and is the key that allows the company to offer its services.

In practice, the order of operations matters. The operating authorisation is tied to a registered company and an approved director. We therefore coordinate the company's registration and the filing of the requests to avoid back-and-forth and periods during which the structure exists but cannot invoice.

Each agent employed or assigned to a security activity must hold a professional card (article L612-20 of the CSI), valid for 5 years. This must be built into the forecast from the start: an agent without a card cannot be assigned to the field, which directly affects the company's ability to honour its contracts.

A common case: the sole trader who personally carries out the assignments. They then hold all three authorisations, the director's approval, the operating authorisation and the professional card.

The director's approval and the professional card are valid for 5 years. Their renewal must be requested at least 3 months before expiry. The point of vigilance is unequivocal: an expired authorisation interrupts the right to operate.

Here are the steps we follow in our incorporation files:

• check the future director's good standing and professional aptitude upfront;
• gather the supporting documents for qualification and, where relevant, residence;
• align the company's registration with the CNAPS filing timeline;
• file the director's approval request with the CNAPS;
• file the company's operating authorisation request;
• arrange the professional cards for the first agents;
• record the renewal deadlines (5 years) in a schedule, with a 3-month alert.

In the incorporation files we support, the most frequent bottleneck is not accounting but timing: the company is registered, the first contracts are signed, but the operating authorisation has not yet been issued. The company exists and cannot invoice its security services. Our role is to align the legal timeline, the cash-flow forecast and the CNAPS review period so that the commercial launch coincides with obtaining the authorisations.

Beyond the approval, this sector has its own management constraints (the prevention and security collective agreement, hours tracking, a large payroll). We detail them on our dedicated page on accounting for private security companies, so that regulatory compliance and financial steering move forward together. This article is for information; a decision specific to your situation requires a review of your file and the law in force.