S1 / Public institutions and regulators
Public administrations and regulators hold data that the law protects: statutory secrets, personal data, supervisory information. Since summer 2026, SecNumCloud has been a legal requirement rather than a doctrine for the French State’s sensitive data, and the AI Act lists access to public benefits among high-risk uses. Every AI or cloud project must now show where the data goes, who can access it and who decides.
Submit a briefAssess each project against SecNumCloud, the AI Act and the applicable secrecy rules, then cost the hosting and tooling scenarios before any budget commitment.
Draft the technical tender documents (hosting, logging, reversibility, audit rights), analyse bids and manage suppliers through to acceptance; your legal team validates compliance with public procurement rules.
Design a private, segregated document assistant, pilot it on an anonymised corpus and measure its quality before any roll-out, with the authorised officer keeping the decision.
Map access rights and data flows, prepare impact assessments (GDPR and fundamental rights), the algorithmic notice on decisions and the evidence file expected under NIS2.
Other sectors
Not under Article 31 of the SREN Act, which covers State administrations, some of their operators and six public interest groupings. A private member’s bill tabled in the National Assembly seeks to extend it to the largest local authorities; nothing prevents you from requiring it in a tender today.
Yes for prohibited practices, since February 2025, and for transparency when people interact with an AI system, since 2 August 2026. Obligations for Annex III high-risk systems, including access to public benefits, apply from 2 December 2027.
For public or non-sensitive data, with written usage rules, often yes. For data covered by secrecy or of particular sensitivity, you need a controlled environment whose hosting and non-reuse of data are guaranteed by contract.
Independent analysis, not legal advice. Facts checked as at 29 October 2026.