Thom'AS
Thom'AS
For
ChapsVision - Paris, France
ChapsVision - Paris, France
Defense & National Security - NDA
Defense & National Security - NDA
One misconfiguration here doesn't create a support ticket. It creates a national security incident.
One misconfiguration here doesn't create a support ticket. It creates a national security incident.
One misconfiguration here doesn't create a support ticket. It creates a national security incident.
Thom'AS is ChapsVision's authorization & confidentiality management platform, the system of record for who is cleared to enter which site, handle which classified materials, and access which information across defense, nuclear, and public institutions in France. I conducted the legacy platform redesign end to end, allocated 90% to the project as part of ChapsVision's CyberGov tribe. This version walks the five modules that carry the main compliance story, "Alerts, Gestion des Habilitations, CPRs, Rôles & Permissions, and Gestion des Utilisateurs, screen by screen, straight from the design playground.
Thom'AS is ChapsVision's authorization & confidentiality management platform, the system of record for who is cleared to enter which site, handle which classified materials, and access which information across defense, nuclear, and public institutions in France. I conducted the legacy platform redesign end to end, allocated 90% to the project as part of ChapsVision's CyberGov tribe. This version walks the five modules that carry the main compliance story, "Alerts, Gestion des Habilitations, CPRs, Rôles & Permissions, and Gestion des Utilisateurs, screen by screen, straight from the design playground.
⦿ Role
Sole Product Designer / UX Engineer
⦿ Team
8 (Myself + PO, 5 Devs, QA)
⦿ Timeline
Jan – Jun 2026
~70%
~70%
Less approval complexity across the redesigned authorization workflow.
100%
100%
Audit-trail coverage on every habilitation, site, and ISC, with audit prep cut from weeks to hours.
8 levels
8 levels
Organizational hierarchy unified into a single navigable source of truth.
Compliance wasn't an afterthought
IGI 1300, IM 900, ANSSI security-by-design, RGPD, and WCAG/RGAA built in from the start, eliminating downstream remediation and accelerating certification readiness.
Compliance wasn't an afterthought
IGI 1300, IM 900, ANSSI security-by-design, RGPD, and WCAG/RGAA built in from the start, eliminating downstream remediation and accelerating certification readiness.
Context & Stakes
Context & Stakes
20 years in service, and zero room for error.
20 years in service, and zero room for error.
For over two decades, Thom'AS has been the system of record for who is cleared to enter which site, handle which classified materials, and access which information, across 30+ defense, nuclear, and public-sector organizations around 100+ secured sites in France. It manages the full lifecycle of security clearances (Gestion des habilitations), classified-materials tracking, and personnel records for internal staff, external personnel, and visitors.
For over two decades, Thom'AS has been the system of record for who is cleared to enter which site, handle which classified materials, and access which information, across 30+ defense, nuclear, and public-sector organizations around 100+ secured sites in France. It manages the full lifecycle of security clearances (Gestion des habilitations), classified-materials tracking, and personnel records for internal staff, external personnel, and visitors.
ChapsVision is an enterprise defense, cyber, and government software vendor with its own in-house Engineering Design Studio, six business units, 20+ product lines. Thom'AS sits inside the CyberGov tribe, alongside other sovereign platforms (crisis management, intelligence investigations, and computer vision among them). I was embedded as product designer, allocated 90% to Thom'AS, to take it through a full modernization, not a re-skin, but a real compliant rebuild of how the product thinks. This is the most organizationally complex, government-grade product design work I've undertaken, alongside Crisis-NG and other sovereign platforms.
ChapsVision is an enterprise defense, cyber, and government software vendor with its own in-house Engineering Design Studio, six business units, 20+ product lines. Thom'AS sits inside the CyberGov tribe, alongside other sovereign platforms (crisis management, intelligence investigations, and computer vision among them). I was embedded as product designer, allocated 90% to Thom'AS, to take it through a full modernization, not a re-skin, but a real compliant rebuild of how the product thinks. This is the most organizationally complex, government-grade product design work I've undertaken, alongside Crisis-NG and other sovereign platforms.
The original system had done its job for 20 years. It also hadn't been meaningfully touched in 20 years — built on assumptions, workflows, and a permission model that predated the regulatory complexity it now had to support.
The Real Problem
The brief said "modernize the UI." That wasn't the problem.
Compliance lived in people's heads and paper procedure — not in the system.
Roughly 30 rules from IGI 1300 — France's governing instruction for protecting national defense secrets — were enforced through operator training and manual discipline, not the interface itself. A security officer who forgot a rule, or was new, could still configure a non-compliant setup. The software wouldn't stop them; only a procedure manual would.
Due to confidentiality agreements, detailed product artifacts, workflows, architecture, and implementation cannot be published publicly. Qualified reviewers may request access for a guided walkthrough.
Due to confidentiality agreements, detailed product artifacts, workflows, architecture, and implementation cannot be published publicly. Qualified reviewers may request access for a guided walkthrough.
Reviewed manually · Avg. reply < 24h
Available for consulting & partnerships
Available for consulting & partnerships
The next project could be yours
The next project could be yours
I partner with startups, enterprises, and government teams to simplify complex systems, from strategy and design to production-ready delivery. If you're building something ambitious, let's talk.
I partner with startups, enterprises, and government teams to simplify complex systems, from strategy and design to production-ready delivery. If you're building something ambitious, let's talk.
