Frequently asked questions
Straight answers to the usual objections.
Commercial, technical and contractual: the questions an MSP owner and a technical lead ask before committing.
Positioning
Is Galyct MSP a SOC or an MDR?
No. Galyct MSP is a multi-client orchestration and management layer. Detection and response depend on the connected tools and the services actually operated.
Who keeps the relationship with the end client?
The partner. It keeps the contract, the billing and first-line support.
Can I use my current tools?
Yes, if a connector exists. The public catalogue shows the exact status of every integration.
Are multi-client actions automatic?
No. Galyct can prepare a campaign; actions are validated and executed client by client, except very low-risk actions explicitly pre-approved in the client's mandate.
Can NARA take action?
NARA analyses and prepares. It only executes within authorised categories, after your explicit validation, and some actions remain forbidden to it, even when validated.
Program and economics
How much does MSP access cost?
There is no paid MSP subscription for a validated partner. Full access is kept as long as at least one Galyct Pro client is active.
Can I try before becoming a partner?
Yes. The 15-day sandbox lets you test roles and workflows. Sensitive or costly features stay limited: live connectors, bulk exports, sensitive actions, full white label, unlimited AI.
How do I become Certified or Strategic?
Certified: at least 3 active clients and 1 fully certified person. Strategic: at least 50 active clients and 3 fully certified people. Upgrades are automatic.
Which certifications exist?
Certified Operator, Certified Administrator, Certified Incident Operator and Certified GRC Consultant.
Are prices public?
Licence, service and pack prices are set by Galyct and shared with partners during qualification. The site does not display a price list.
Can I white-label?
Yes, within the set limits. Galyct remains visible everywhere through a standard mention such as "Service operated with GALYCT" or "Secured by GALYCT".
Technical and security
Where is data processed?
Hosted in France; processed in France or the European Union, according to Galyct's sovereignty policy and the subprocessors published in the trust center.
Is MFA mandatory?
Yes, for every MSP and client account, no exceptions. Passkeys (WebAuthn) are supported. Client organizations on the Performance or Sovereignty plan can also sign in with OIDC single sign-on. The Galyct second factor is still required.
Who chooses the AI provider?
Galyct alone. A partner cannot change it. The AI engine processes data in France or the European Union.
Does Galyct see my financial data?
No. Your financial dashboard is strictly private; Galyct does not look at it.
Contract and lifecycle
What happens if a client changes provider?
The transfer is framed, approved by the client, scheduled with at least 48 hours' technical notice, with no overlap. The previous provider only keeps read access to its own history.
Can my client revoke my access?
Yes, at any time, from their portal, with re-authentication and MFA. Your actions are blocked immediately and a closure report is produced.
What if I lose a certification?
Grace and remediation periods apply. While non-compliant, no new client can be signed for the services concerned.
What happens at the end of the sandbox?
If the agreement is not finalised by day 15, the account moves to a very restricted mode. Your data and configuration are kept and moved to your permanent environment after validation.
Your question isn't here?
Write to the partner team, or try the platform directly.