Summary

  • Orange Business Services SA's report covers France from 17 February 2024 through 31 December 2024 and places hosting and caching, including content delivery network functions, inside its moderation-reporting scope.
  • The same report says internet-access-provider moderation is addressed in Orange SA's separate report, so the boundary is documentary and service-specific rather than proof that one entity controls every operational layer.

The Digital Services Act, or DSA, provides a function-based way to discuss online intermediary services. It distinguishes a mere-conduit function concerned with transmission or access, a caching function that uses intermediate temporary storage to make onward transmission more efficient, and a hosting function that stores information at a recipient's request. Those categories matter because a company name alone does not tell a reader which function, reporting duty, or operational responsibility is being discussed.

Orange Business Services SA's company-authored transparency report gives that distinction a concrete business setting. The report identifies activities in France for professional customers and says Orange Business supplies electronic-communications, hosting, and caching services, including content delivery network, or CDN, functions. It covers the period from 17 February 2024 through 31 December 2024 and states that it was published in April 2025.

Those dates and that French professional-customer scope are essential limits: the report is not a description of every Orange Business activity, every customer, every country, or present operating conditions.

The most useful passage is the report's separation of moderation scopes. It says the report does not address moderation performed in the capacity of an internet-access provider because that activity is included in Orange SA's separate report. It then limits its own treatment to hosting and caching. This creates an observable responsibility boundary in the documents. It does not, by itself, prove a technical handoff, an outsourcing arrangement, a transfer of ownership, or a complete map of responsibility across all Orange services.

That distinction protects the analysis from opposing mistakes. It would be wrong to assume that the Orange name makes every intermediary function the responsibility of the same legal or operational entity. It would also be wrong to treat a reporting boundary as proof that the underlying systems are disconnected. The available evidence supports neither conclusion. It supports a narrower finding: for this report and its stated period, hosting and caching moderation are treated in the Orange Business Services SA document, while internet-access-provider moderation is addressed elsewhere by Orange SA.

The report also says that Orange Business received no orders from authorities and performed no content moderation during the covered period. These are attributed, period-bound statements from the company report. They do not establish that no illegal content, abuse, notice, complaint, compliance risk, service activity, outage, or operational work existed beyond the fields and scope reported. Nor do they provide measurements of traffic, availability, capacity, customer volume, security quality, or performance.

For a business reader, the central lesson is therefore about verification. Registry identity answers who appears in a formal member directory. The DSA explains service categories and transparency context. The company report states which moderation functions it covers and which it excludes. General contract terms describe a provider-and-client frame. Each source can be useful, but none can stand in for all the others.

Why the responsibility boundary matters

Hosting, caching, and internet access can sit close together in a commercial conversation while carrying different documentary meanings. The DSA's categories are defined by function, not by brand. Orange Business Services SA's report follows that functional logic when it places hosting and caching within its own moderation discussion but excludes internet-access-provider moderation to a separate Orange SA report.

This makes operational control a question to be evidenced, not assumed. A transparency report can identify the entity and service scope responsible for a particular report. It cannot, without additional operating evidence, prove which infrastructure carries traffic, how systems are configured, who controls every technical layer, or how a service performs. The shared Orange name supplies context; it is not a substitute for a service-specific record.