Private security company: the key role of the accountant (CNAPS, payroll, 2026)

Quick answer. A private security company has to handle two constraints few firms master: the CNAPS regulation (operating authorisation, director approval, professional cards, all valid for 5 years) and an intensive payroll under the prevention and security collective agreement (IDCC 1351), with a night-shift premium over the 9 p.m. to 6 a.m. window, a panier allowance and a habillage allowance. The accountant's value lies exactly here: securing the payroll and steering the margin contract by contract.

You run or are setting up a guarding, human-surveillance or remote-monitoring business. The issue is neither VAT nor the annual accounts: your real centre of gravity is a heavy wage bill, shift schedules that change every month, and a regulatory layer that conditions the very right to invoice. A firm that treats your file like an ordinary service company misses the essentials.

Private security falls under Book VI of the internal security code (CSI) and the oversight of the CNAPS, the National council for private security activities. The activities covered by article L611-1 of the CSI include human surveillance, surveillance through electronic security systems, the guarding of movable and immovable property, and the safety of persons within those premises.

The practical consequence is simple: before signing a single contract, the company must clear three distinct and cumulative administrative gates.

Article L612-6 of the CSI leaves no room for interpretation: "No one may carry out, on an individual basis, an activity mentioned in article L. 611-1, nor direct, manage or be a partner of a legal entity carrying out that activity, unless they hold an approval." Renewal of these titles must be requested at least three months before expiry. The individual entrepreneur who works on the ground himself holds all three titles at once.

When we support the creation of a private security company, the timeline is never limited to filing the articles of association. The operating authorisation and the director approval condition the actual start of the business: without them, no service can be billed legally. We therefore build the cash-flow plan around this administrative lead time, not around the registration date alone.

The choice of legal form deserves the same attention. Whether you go for a SASU, a SARL or a multi-partner company, each partner may be subject to approval. A capital split decided without anticipating the partners' approval can block the operating authorisation. This is a point we check upstream, before drafting the articles of association, when setting up your company.

Here is the sequence we recommend to a founder:

1. Check the director's eligibility for approval (good-standing condition, professional aptitude) before any commitment.
2. Align the legal form and capital split with the partners' approval constraint.
3. Incorporate the company, then file the operating authorisation request with the CNAPS.
4. Build the cash-flow plan including the processing time, a period when no invoicing is possible.
5. Anticipate the professional cards of the first agents recruited.

The precise terms for obtaining the director's approval deserve their own treatment: we cover them in our guide on the CNAPS director approval.

A guarding company runs around the clock: day and night shifts, weekends, public holidays. The collective agreement for prevention and security companies (IDCC 1351) provides, among other things, a night-shift premium over the 9 p.m. to 6 a.m. window, as well as a panier allowance and a habillage allowance. These elements are calculated agent by agent, on highly variable shift schedules, with overtime and working-time modulation.

In practice, this generates a high volume of payroll variables every month. With large headcounts, often at the agreement minimum, the wage bill becomes the number-one cost item and the margin remains structurally thin. The slightest error on a premium, multiplied by the number of agents and payslips, quickly turns into labour-court and URSSAF exposure. This is precisely why payroll and HR administration cannot be treated as a clerical formality in this sector.

Hayot Expertise tip. Ask for a documented payroll setup, where every premium and allowance references the matching agreement article. In the event of an audit, this configuration file is your first line of defence: it proves your calculations are deliberate and justified, not approximate.

In this sector, the value of a specialised accountant is not measured by bookkeeping but by the reliability of payroll and the steering of margin per contract. The selling price of an hour of service is often negotiated at the tightest level: it is the correctly calculated premiums, allowances and overtime that make the difference between a profitable assignment and a loss-making one.

We supported a fast-growing human-surveillance company that had just won several sites to cover around the clock. Schedules multiplied, night shifts piled up, and payroll was still processed manually. Over the months, night premiums were applied inconsistently from one agent to another: the same time slot paid differently depending on who entered the payslip. Our work consisted in making the payroll setup reliable against the agreement, producing margin indicators per contract, and clarifying, contract by contract, which ones were profitable and which had to be renegotiated. The director discovered that two of his most prestigious sites were in fact his least profitable.

Our conviction: in guarding, the margin is won on payroll, not on sales. A generalist firm focuses on the overall result and misses the only indicator that truly matters, the real profitability of each contract once all premiums are factored in.

The most underestimated risk lies in its slowness. A poorly configured night premium or a forgotten contractual allowance goes unnoticed as long as no agent disputes it. The day a URSSAF audit or a labour court looks at the file, the back claim covers all the affected payslips, over several years. A payroll setup aligned with IDCC 1351 from the outset costs far less than fixing it later.

The frictions we see most often in private security files:

• A night premium applied variably depending on who enters the payroll variables.
• Panier and habillage allowances paid irregularly, for lack of a written rule.
• Overtime and modulation poorly transferred from schedules to payroll.
• A director approval or professional cards left to expire for lack of deadline tracking.
• Cash flow built on the registration date, when invoicing only starts after the operating authorisation.

A sole-trader security business that operates on its own combines, as noted, all three titles: operating authorisation, approval and professional card. Deadline tracking is therefore concentrated on a single person, which simplifies the calendar but makes the activity fragile if the director is incapacitated.

Companies mixing human surveillance and electronic remote monitoring both fall under article L611-1, but their cost structures differ sharply: the former is labour-intensive and therefore payroll-intensive, the latter capital-intensive in equipment and subscriptions. Margin steering is not built the same way. Finally, a company recruiting in waves must anticipate the lead time to obtain professional cards for its new agents, otherwise it ends up paying staff it cannot assign on site.