%23%20%2A%2AContexte%2A%2A%0A%0ALe%20conventionnement%20du%20parc%20social%20est%20n%C3%A9%20de%20la%20volont%C3%A9%20de%20l%E2%80%99Etat%20d%E2%80%99encadrer%20au%20mieux%20les%20modalit%C3%A9s%20de%20gestion%20du%20parc%20locatif%20social%20en%201977.%0AEn%20%C3%A9change%20de%20l%E2%80%99ouverture%20du%20droit%20%C3%A0%20l%E2%80%99APL%20pour%20les%20locataires%20des%20logements%20concern%C3%A9s%2C%20les%20conventions%20fixent%20les%20obligations%20du%20bailleur%20%C3%A0%20l%E2%80%99%C3%A9gard%20de%20l%E2%80%99Etat%20et%20surtout%20des%20locataires%20%28respect%20des%20plafonds%20de%20ressources%2C%20%C3%A9tablissement%20du%20bail%2C%20droit%20au%20maintien%20dans%20les%20lieux%2C%20respect%20d%E2%80%99un%20loyer%20fix%C3%A9%20dans%20la%20convention%20et%20des%20modalit%C3%A9s%20de%20sa%20r%C3%A9vision%29.%0AChaque%20ann%C3%A9e%2C%20c%E2%80%99est%20plus%20de%2015%20000%20conventions%20qui%20sont%20sign%C3%A9es%20et%20permettent%20aux%20m%C3%A9nages%20d%E2%80%99acc%C3%A9der%20%C3%A0%20des%20logements%20sociaux.%20%0A%0A%23%20Probl%C3%A8me%0A%0ADepuis%201977%2C%20le%20conventionnement%20APL%20n%E2%80%99a%20pas%20connu%20d%E2%80%99%C3%A9volution%20majeure%2C%20et%20ce%2C%20en%20d%C3%A9pit%20des%20nombreux%20probl%C3%A8mes%20rencontr%C3%A9s%20par%20les%20bailleurs%2C%20les%20instructeurs%20et%20les%20services%20annexes%20%28Caisses%20des%20Allocations%20Familiales%20notamment%29.%20%0A%0A%0AQuelques%20unes%20des%20difficult%C3%A9s%20identifi%C3%A9es%20lors%20de%20nos%20interviews%20exploratoires%20%3A%20%0A%0A%23%23%23%201%2F%20Difficult%C3%A9%20%C3%A0%20remplir%20et%20valider%20une%20convention%0A%0A%2A%20Des%20allers-retours%20bailleur%2Finstructeur%20nombreux%20afin%20de%20valider%20la%20convention%0A%2A%20Des%20erreurs%20dans%20le%20remplissage%20des%20conventions%20par%20les%20bailleurs%20%28article%20supprim%C3%A9%2C%20renseignements%20au%20mauvais%20endroit%E2%80%A6%29%0A%2A%20Une%20incompr%C3%A9hension%20dans%20le%20calcul%20du%20loyer%0A%2A%20Absence%20de%20suivi%20de%20l%E2%80%99instruction%20source%20d%E2%80%99inqui%C3%A9tude%20pour%20le%20bailleur%0A%2A%20Les%20refus%20de%20publication%20de%20la%20part%20des%20services%20de%20la%20publicit%C3%A9%20fonci%C3%A8re%0A%0A%23%23%23%202%2F%20Difficult%C3%A9%20%C3%A0%20faire%20vivre%20la%20convention%0A%0A%2A%20Avenants%20inexistants%20pour%20suivre%20la%20vente%20des%20logements%2C%20les%20changements%20de%20gestionnaires%20ou%20les%20travaux%20effectu%C3%A9s%0A%2A%20Pas%20d%E2%80%99acc%C3%A8s%20centralis%C3%A9%20aux%20conventions%20entre%20toutes%20les%20parties%20prenantes%20de%20la%20convention%20%28CAF%2C%20pr%C3%A9fectures%2C%20MSA%E2%80%A6%29%0A%0A%23%20Service%0A%0ALa%20mission%20%C3%A0%20laquelle%20contribue%20APiLos%20est%20de%20faciliter%20l%27acc%C3%A8s%20aux%20logements%20sociaux%20par%20la%20simplification%20des%20conventions.%0A%0AAPiLos%20a%20pour%20objectifs%20de%20%3A%0A%0A%2A%20Simplifier%20les%20conventions%0A%2A%20Faire%20gagner%20en%20rapidit%C3%A9%20la%20saisie%20par%20les%20bailleurs%20de%20logements%20sociaux%2C%20ainsi%20que%20les%20instructions%20par%20les%20services%20d%C3%A9concentr%C3%A9s%20de%20l%E2%80%99Etat%20et%20les%20collectivit%C3%A9s%20d%C3%A9l%C3%A9gataires%0A%2A%20A%20terme%2C%20Disposer%20de%20statistiques%20en%20temps%20r%C3%A9el%20sur%20la%20politique%20du%20logement%20en%20France%0A%0A%0A%0APour%20r%C3%A9pondre%20%C3%A0%20ces%20enjeux%2C%20la%20plateforme%20APiLos%20a%20%C3%A9t%C3%A9%20%3A%0A%0A%2A%20Dans%20un%20premier%20temps%20exp%C3%A9riment%C3%A9e%20dans%20les%20Bouches%20du%20Rh%C3%B4ne%20en%20septembre%202021%2C%20aupr%C3%A8s%20des%20bailleurs%20de%20logements%20sociaux%2C%20puis%2C%20en%20novembre%202021%2C%20aupr%C3%A8s%20des%20instructeurs%2C%20des%20services%20d%C3%A9concentr%C3%A9s%20et%20des%20collectivit%C3%A9s%20d%C3%A9l%C3%A9gataires%20%0A%2A%20Dans%20un%20second%20temps%20lanc%C3%A9e%20au%20niveau%20national%20en%20janvier%202022.%20Au%2018%20juillet%202022%2C%20nous%20avions%20282%20utilisateurs%20chez%20les%20bailleurs%20et%20120%20pour%20les%20instructeurs%0A%0A%0A%0AAPiLos%20permet%20aujourd%E2%80%99hui%20%3A%0A%0A%2A%20Aux%20bailleurs%20de%20logements%20sociaux%20de%20remplir%20automatiquement%20les%20champs%20de%20leur%20convention%20et%20de%20g%C3%A9n%C3%A9rer%20en%20ligne%20une%20convention%20APL%0A%2A%20Aux%20services%20d%C3%A9concentr%C3%A9s%20et%20aux%20collectivit%C3%A9s%20d%C3%A9l%C3%A9gataires%20d%E2%80%99instruire%20directement%20en%20ligne%20les%20conventions%20et%20d%E2%80%99y%20apporter%20des%20demandes%20de%20compl%C3%A9ments%20ou%20de%20modifications%0A%0A%23%23%20%5C%0AConcr%C3%A8tement%20APiLos%20permet%20%3A%C2%A0%0A%0A%23%23%23%20En%20tant%20que%20bailleur%2C%20je%20peux%20%3A%0A%0A%2A%20remplir%20uniquement%20les%20champs%20requis%20de%20mes%20convention%2C%0A%2A%20disposer%20d%E2%80%99un%20formulaire%20pr%C3%A9-rempli%20automatiquement%20gr%C3%A2ce%20aux%20informations%20connues%20par%20l%E2%80%99Etat%0A%2A%20%C3%A9changer%20facilement%20avec%20les%20instructeurs%20sur%20les%20points%20%C3%A0%20modifier%2C%0A%2A%20avoir%20acc%C3%A8s%20%C3%A0%20un%20suivi%20en%20temps%20r%C3%A9el%20de%20l%E2%80%99avanc%C3%A9e%20de%20mes%20conventions%2C%0A%2A%20retrouver%20en%20un%20clic%20les%20conventions%20valid%C3%A9es%20pass%C3%A9es.%0A%0A%23%23%23%20En%20tant%20qu%E2%80%99instructeur%2C%20je%20peux%20%3A%C2%A0%0A%0A%2A%20instruire%20directement%20en%20ligne%20les%20conventions%20en%20%C3%A9tant%20d%C3%A9charg%C3%A9%20de%20la%20v%C3%A9rification%20des%20paragraphes%20r%C3%A9guli%C3%A8rement%20modifi%C3%A9s%20ou%20supprim%C3%A9s%20par%20les%20bailleurs%0A%2A%20b%C3%A9n%C3%A9ficier%20du%20contr%C3%B4le%20syst%C3%A9matique%20de%20l%E2%80%99outil%20sur%20les%20principaux%20champs%20pr%C3%A9alablement%20sources%20d%E2%80%99erreur%20%28ex%C2%A0%3A%20date%20de%20fin%20de%20convention%29%2C%0A%2A%20apporter%20rapidement%20mes%20demandes%20de%20compl%C3%A9ments%2C%0A%2A%20%C3%A9changer%20facilement%20avec%20les%20bailleurs%20sur%20les%20points%20%C3%A0%20modifier%2C%0A%2A%20g%C3%A9n%C3%A9rer%20en%20ligne%20une%20convention%20APL%20au%20format%20CERFA%0A%0A%23%23%23%20Impact%20du%20service%20APiLos%0A%0ANous%20mesurons%20notre%20impact%20via%20deux%20indicateurs%20%3A%20%0A%0A%2A%20Le%20temps%20moyen%20d%27instruction%20d%27une%20convention%20sur%20APiLos%20%28vs%20pr%C3%A9c%C3%A9demment%20avec%20la%20m%C3%A9thode%20classique%20de%20conventionnement%29%0A%2A%20Le%20nombre%20de%20logements%20couverts%20par%20le%20service%20depuis%20d%C3%A9cembre%202021%0A%0A%0A%0A%23%20Strat%C3%A9gie%0A%0A%2A%20%2A%2AAvril%20-%20Mai%202021%20%3A%2A%2A%20Investigation%20du%20probl%C3%A8me%20avec%20des%20interviews%20aupr%C3%A8s%20de%20toutes%20les%20parties%20prenantes%20du%20conventionnement%20APL%0A%2A%20%2A%2AJuillet%20Ao%C3%BBt%202021%20%3A%2A%2A%20D%C3%A9veloppement%20d%E2%80%99une%20version%20b%C3%AAta%20de%20la%20plateforme%0A%2A%20%2A%2ASeptembre-octobre%202021%20%3A%2A%2A%20Test%20aupr%C3%A8s%20de%2010%20bailleurs%20HLM%20dans%20les%20Bouches-du-Rh%C3%B4ne%20et%20g%C3%A9n%C3%A9rations%20des%20conventions%20APL%20en%20ligne%2C%20it%C3%A9ration%20en%20continu%20avec%20nos%20beta-testeurs%0A%2A%20%2A%2ANovembre-d%C3%A9cembre%202021%20%3A%2A%2A%20D%C3%A9ploiement%20de%20la%20plateforme%20c%C3%B4t%C3%A9%20instructeur%2C%20%C3%A0%20savoir%20la%20m%C3%A9tropole%20Aix-Marseille-Provence%20et%20la%20DDTM13%0A%2A%20%2A%2AJanvier%202022%20%3A%2A%2A%20Validation%20de%20l%E2%80%99int%C3%A9gration%20d%E2%80%99APiLos%20au%20Syst%C3%A8me%20d%E2%80%99Information%20des%20Aides%20%C3%A0%20la%20Pierre%20%28SIAP%29%2C%20d%C3%A9velopp%C3%A9%20par%20la%20DHUP%20%0A%2A%20%2A%2A1er%20semestre%202022%20%3A%2A%2A%20%0A%0AD%C3%A9ploiement%20national%20d%E2%80%99APiLos%20%0A%0A%0AD%C3%A9veloppement%20des%20conventions%20SEM%2C%20ainsi%20que%20des%20conventions%20Type%20I%20%26%20II.%20APiLos%20r%C3%A9pond%20ainsi%20%C3%A0%2098%20%25%20des%20besoins%20de%20conventionnement%20et%20100%20%25%20des%20logements%20ordinaires%2C%20avec%20les%20logements%20HLM%2C%20SEM%2C%20ainsi%20que%20les%20autres%20bailleurs%20I%20et%20II.%0A%0A%0AD%C3%A9veloppement%20d%27une%20API%20pour%20connecter%20APiLos%20au%20Syst%C3%A8me%20d%E2%80%99Information%20des%20Aides%20%C3%A0%20la%20Pierre%20%28SIAP%29%0A%0A%0ALancement%20d%E2%80%99une%20investigation%20c%C3%B4t%C3%A9%20locataire%2FCAF%2Fbailleur%20pour%20comprendre%20les%20difficult%C3%A9s%20rencontr%C3%A9es%20au%20moment%20de%20la%20mise%20en%20place%20des%20APL%20et%20se%20familiariser%20avec%20notre%20utilisateur%20final%0A%0A%2A%20%2A%2A2%C3%A8me%20semestre%202022%20%3A%2A%2A%20%0A%0AD%C3%A9veloppement%20des%20avenants%20et%20r%C3%A9siliations%2C%20ainsi%20que%20des%20conventions%20Foyer%20r%C3%A9sidence%0A%0A%0AOuverture%20prochaine%20d%E2%80%99un%20lieu%20de%20stockage%20unique%20et%20s%C3%A9curis%C3%A9%20pour%20les%20utilisateurs%20de%20conventions%20APL%20%28CAF%2C%20MSA%2C%20pr%C3%A9fectures%29%0A%0A%0AEngager%20et%20tester%20sur%20le%20terrain%20une%20simplification%20d%E2%80%99ampleur%20des%20conventions%0A%0A%2A%20%2A%2AA%20partir%20de%202023%20%3A%2A%2A%0A%0AReprise%20des%20donn%C3%A9es%20Ecoloweb%2C%20D%C3%A9veloppement%20des%20conventions%20ANAH%0A%0A%0AApr%C3%A8s%20%C3%A9tude%20de%20la%20faisabilit%C3%A9%20%3A%20Signature%20%C3%A9lectronique%2C%20Connexion%20avec%20le%20Service%20de%20la%20Publicit%C3%A9%20Fonci%C3%A8re

product_launch

APiLos

investigation

construction

Change this code to not construct the path from user-controlled data.

I/O function calls should not be vulnerable to path injection attacks

pythonsecurity:S2083

SonarCloud

DOM text is reinterpreted as HTML without escaping meta-characters.

js/xss-through-dom

CodeQL

This replaces only the first occurrence of '"'.

js/incomplete-sanitization

content-security-policy

Content Security Policy (CSP) implemented with unsafe sources inside style-src. This includes 'unsafe-inline', data: or overly broad sources such as https:.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

All cookies use the Secure flag, session cookies use the HttpOnly flag, and cross-origin restrictions are in place via the SameSite flag

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

Referrer-Policy header set to "no-referrer", "same-origin", "strict-origin" or "strict-origin-when-cross-origin"

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to a minimum of six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, but all scripts are loaded from a similar origin

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) header set to SAMEORIGIN or DENY

x-xss-protection

X-XSS-Protection header not needed due to strong Content Security Policy (CSP) header

style-src 'self' https://code.highcharts.com/css/highcharts.css https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui.css 'unsafe-inline'; manifest-src 'self'; object-src 'none'; default-src 'none'; script-src https://stats.data.gouv.fr/piwik.js 'self' 'sha256-zaYxlJmjbzgo2YczX5XHFlvamZUNy264d7XlOOUwMME=' 'sha256-928U3JmFf9xytJJBtEU5V1FVGcqsTfwaVnI2vmHmamA=' 'sha256-lkrKw/baCFdnI+tB9T+0yFMewpXSk9yct2ZbWEGPDhY=' 'sha256-J71e5kr85q2XGRl+qwOA/tpMsXmKDjeTnvlzBhBsz/0=' 'sha256-h7boyH6dI/JQnsm6Iw1sAtEbdb/+638kREPj4sfWmMs=' 'sha256-7uHmVaAHWxl0RElSoWED7kK+9kRSQ+E6SQ3aBK1prkU=' https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-bundle.js https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-standalone-preset.js 'nonce-nm4HzFVq+iCSHxwqFOZ9mw=='; connect-src 'self' https://stats.data.gouv.fr/piwik.php; font-src 'self' data:; frame-src 'self'; img-src 'self' data: https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/favicon-32x32.png

Diagnostics

Metrics

http

https

DOM EventListener detection

SSL DNS Names

TLS Version

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

An NS record was detected. An NS record delegates a subdomain to a set of name servers.

NS Record Detection

A DNS TXT record was detected. The TXT record lets a domain admin leave notes on a DNS server.

DNS TXT Record Detected

WAF Detection

An MX record was detected. MX records direct emails to a mail exchange server.

MX Record Detection

_pk_ses.188.b4f2

_pk_id.188.b4f2

sc-sticky-session

style-src 'self' https://code.highcharts.com/css/highcharts.css https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui.css 'unsafe-inline'; manifest-src 'self'; object-src 'none'; default-src 'none'; script-src https://stats.data.gouv.fr/piwik.js 'self' 'sha256-zaYxlJmjbzgo2YczX5XHFlvamZUNy264d7XlOOUwMME=' 'sha256-928U3JmFf9xytJJBtEU5V1FVGcqsTfwaVnI2vmHmamA=' 'sha256-lkrKw/baCFdnI+tB9T+0yFMewpXSk9yct2ZbWEGPDhY=' 'sha256-J71e5kr85q2XGRl+qwOA/tpMsXmKDjeTnvlzBhBsz/0=' 'sha256-h7boyH6dI/JQnsm6Iw1sAtEbdb/+638kREPj4sfWmMs=' 'sha256-7uHmVaAHWxl0RElSoWED7kK+9kRSQ+E6SQ3aBK1prkU=' https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-bundle.js https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/swagger-ui-standalone-preset.js 'nonce-BJnUvKsOxQL6Q4o+YZT27Q=='; connect-src 'self' https://stats.data.gouv.fr/piwik.php; font-src 'self' data:; frame-src 'self'; img-src 'self' data: https://cdn.jsdelivr.net/npm/swagger-ui-dist@latest/favicon-32x32.png

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Matomo Analytics is a free and open-source web analytics applicatio, that runs on a PHP/MySQL web-server.

Matomo Analytics

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Mailjet is an email delivery service for marketing and developer teams.

Mailjet

Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.

Popper

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Cookies	Domaine	HTTP Only	Secure
_pk_ses.188.b4f2	apilos.beta.gouv.fr	❌	❌
_pk_id.188.b4f2	apilos.beta.gouv.fr	❌	❌
sc-sticky-session	apilos.beta.gouv.fr	✔️	✔️

https://apilos.beta.gouv.fr

LightHouse

https://apilos.beta.gouv.fr/

Scripts tiers et cookies

Page de statistiques

Page de budget

Déclaration de mise en accessibilité

Mentions légales

Politique de confidentialité