Security equipment for partitioning the data transfers between first and second domains (1, 2) comprising: - a hardware layer comprising a computation means that comprises a processor and a hardware mechanism for compartmentalising the memory, and a storage means; - a virtualisation layer of said hardware layer comprising a hub and a virtual machine monitor; - an application layer comprising: - a first interface component for exchanging data with said first domain; - a second interface component for exchanging data with said second domain; - a security component forming a data exchange cell between said first and second components, said virtual machine monitor performing a temporal partitioning of the execution of said components, and said hardware mechanism for compartmentalising the memory performing a spatial partitioning of said components, characterised in that said security component comprises a means for generating operating metadata and a means for writing said metadata in an audit memory shared with said storage means, and in that said application layer further comprises an audit component comprising a means for reading metadata in said shared memory and a means for processing read metadata, and in that said security component has "write only" rights in said audit memory and in that said audit component has "read only" rights in said audit memory. - a hardware layer comprising a computation means that comprises a processor and a hardware mechanism for compartmentalising the memory, and a storage means; - a virtualisation layer of said hardware layer comprising a hub and a virtual machine monitor; - an application layer comprising: - a first interface component for exchanging data with said first domain; - a second interface component for exchanging data with said second domain; - a security component forming a data exchange cell between said first and second components, said virtual machine monitor performing a temporal partitioning of the execution of said components, and said hardware mechanism for compartmentalising the memory performing a spatial partitioning of said components, characterised in that said security component comprises a means for generating operating metadata and a means for writing said metadata in an audit memory shared with said storage means, and in that said application layer further comprises an audit component comprising a means for reading metadata in said shared memory and a means for processing read metadata, and in that said security component has "write only" rights in said audit memory and in that said audit component has "read only" rights in said audit memory. - a first interface component for exchanging data with said first domain; - a second interface component for exchanging data with said second domain; - a security component forming a data exchange cell between said first and second components, said virtual machine monitor performing a temporal partitioning of the execution of said components, and said hardware mechanism for compartmentalising the memory performing a spatial partitioning of said components, characterised in that said security component comprises a means for generating operating metadata and a means for writing said metadata in an audit memory shared with said storage means, and in that said application layer further comprises an audit component comprising a means for reading metadata in said shared memory and a means for processing read metadata,