CFL
NATIONAL RAIL OPERATOR · ~5,300 STAFF
The country's second largest employer, with eleven freight subsidiaries. ISO 27001 and 22301 compliance, then NIS2. On rail infrastructure, continuity requirements are not a paper exercise.
One agency, one person, no middlemen.
My name is Houssam Guendouz and I founded Guenway. Before that I worked in consulting and recruitment, partly in Luxembourg, alongside owners who were very good at their trade. The same pattern kept coming up: they were paying a lot for a website they did not understand, could not edit, and that nobody found.
I built the opposite: prices published to the last euro, a setup fee stated up front and payable in two instalments, a monthly report written in plain language, one point of contact from the first call through to the third year. When you call Guenway, you get me.
I am not only a supplier. I run my own businesses online, among them a perfumery: product pages, search rankings, stock and advertising are things I live with my own money at stake, not a client's budget. That is what separates advice in theory from advice that holds.
I work remotely, with clients in France, Switzerland, Luxembourg, Belgium, the United Arab Emirates and Qatar. Distance has never been the issue: what counts is understanding the trade in front of me. I turn down projects where I add nothing, and that has nothing to do with where they are.
2024
year the agency was founded
6
countries where I have clients, from Europe to the Gulf
4
production languages: French, English, Arabic, Spanish
1
point of contact per client, from quote to follow-up
WHAT SETS ME APART
Three things I will not do.
Sell you jargon
No « omnichannel strategy », no « growth hacking ». You want more signed quotes: that is the only number I put forward, and it needs no translation.
Hold your site hostage
The domain is in your name, and so are the ad accounts. When the subscription ends, you leave with a full backup and no negotiation.
Bill for what serves no purpose
An online shop for a roofer, a mobile app for a plumber: I say no. A tradesperson who loses money on a pointless project does not come back, and rightly so.
BEFORE GUENWAY
I worked for organisations that are not allowed to go down.
Several years in Luxembourg on compliance and infrastructure projects. My role: frame the need, place the technical people able to handle it, and follow the project through. They were not my clients, they were my employer's. But that is where I learned what holding to a commitment means.
POST Luxembourg
POSTAL, TELECOMS AND ICT · 4,600+ STAFF
The incumbent operator, with subsidiaries in hosting, network security and data. The same compliance work, on a telecoms perimeter classed as an essential entity.
Spuerkeess (BCEE)
STATE-OWNED BANK · 1,950 STAFF · €57bn BALANCE SHEET
Luxembourg's largest domestically owned bank. Project management in a sector supervised by the CSSF, and therefore under DORA: operational resilience there is a regulatory obligation, not a good practice.
i-Hub
SHARED KYC PLATFORM · A POST SUBSIDIARY
The know-your-customer platform shared by Luxembourg's banks, with shareholders including BGL BNP Paribas and Banque de Luxembourg, hosted exclusively in Luxembourg. Systems administration under banking constraint: every access is justified, every change is traced.
University of Luxembourg
~6,700 STUDENTS · 2,500 STAFF · BELVAL CAMPUS
Systems administration across a heterogeneous estate and a user population that turns over every year.
The frameworks I worked under
ISO 27001
Information security management. The foundation: who has access to what, and how you prove it.
ISO 22301
Business continuity. What you do when everything falls over, written down before it does.
NIS2
Cybersecurity for essential and important entities. Transposed into Luxembourg law by the Act of 5 May 2026, under the ILR's authority. Eighteen sectors, from 250 staff or €50m turnover.
DORA
Digital operational resilience for the financial sector. In force since 17 January 2025, taking precedence over the CSSF's own circulars.
What that changes for you: when I say your site is backed up daily, that your data goes nowhere, and that I know what to do if the host falls over, those are not sales lines. That is the previous job.
NO BORDER
The work needs no territory. I do not have one.
Working with Luxembourg and Switzerland taught me intra-community invoicing, multilingual sites and expectations that shift from one country to the next. Working with the Gulf taught me the rest: time zones, local habits, and that a project runs just as well six thousand kilometres away as six.
PRODUCTION LANGUAGES
- FRENCH
- ENGLISH
- ARABIC
- SPANISH
CLIENTS TODAY
- FRANCE
- LUXEMBOURG
- BELGIUM
- SWITZERLAND
- UNITED ARAB EMIRATES
- QATAR
WORKING TOGETHER