+33 (0)1 87 66 00 65 · Monday to Friday, 9am–6pm Free audit (15 min)
● Public sector — Library & media library

AI agent for library staff and media libraries

An assistant that answers users, prepares catalogue records and supports cultural outreach — the librarian keeps the editorial choice and the approval. Hosted in France, on a resource isolated for each library, borrowing histories stay strictly confidential. The AI agent assists, the librarian decides.

Hosted in France Borrowing histories confidential GDPR & AI Act: governed deployment Human oversight

Updated on

Deployed in a few weeks
Media library assistant · hosted in France
A reader is looking for novels about the sea for a 13-year-old.
Selection proposed. Six titles available in the young readers' section, from adventure novels to contemporary fiction, each with its shelfmark and location. Two titles currently on loan can be reserved.
The selection draws only on the catalogue and the records — never on other readers' borrowing history.
⛓ Source · your catalogue (library system) + bibliographic records
Prepare the record for the new picture book that arrived this morning.
Record prepared. Fields filled in from the publisher's references: title, author and illustrator, ISBN, series, proposed indexing and a four-line summary. Shelfmark suggested according to your classification plan.
Nothing enters the catalogue without your review.
✎ Action · record ready for review — the librarian approves
Local inference · no data outside the EU
Data hosted in France
Sovereign by designLocal inference or hosting in France
GDPR & AI Act: governed deploymentTraceability & human oversight
TurnkeyDesigned, installed and operated for you
The librarian decidesThe AI agent assists, it never chooses alone
✦ In brief

In a library or media library, a Blue Lemon Agent agent assists the team with the repetitive tasks — answering users (availability, loans, membership, opening hours), catalogue records, reading suggestions, themed selections and outreach material. It runs on local inference or is hosted in France on a resource dedicated to and isolated for each library: users' data and borrowing histories stay strictly confidential, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity. The choice of collections and the outreach stay human; the time won back goes to advice and welcoming the public. Live within a few weeks. Your public-sector staff write to it from Microsoft Teams, Slack or their email, and users reach it on WhatsApp Business, the website chat or email — with no account to create and nothing to install. Reaching the administration from the tool people already have means less non-take-up of rights and equal access to the service. These connections are included in every plan, at no extra cost, within the number of connections your level includes.

100%
hosted in France in the target architecture
0
transfer outside the EU in the target architecture
7
uses ready to deploy on this scope
0
decision taken without human approval

Reference points describing our offer, not results measured at a client. The scale of the gain is confirmed by a pilot on your own scope.

The context

Why AI matters to libraries — and why they hesitate

Longer opening hours, smaller teams, repetitive enquiries at the expense of outreach: libraries are looking for time. But the data they hold — memberships and borrowing histories — touches on the freedom to read, and deserves exemplary protection.

! The issue

Library staff are caught between users who expect immediate answers — availability, renewals, membership — and the substantive work that gives the profession its value: cataloguing, outreach, cultural programming. Yet most consumer AI tools would amount to entrusting memberships, reading habits and users' borrowing histories to a third party, often hosted outside Europe and subject to the Cloud Act.

Our answer

For a library, AI is only of interest if it is sovereign and confidential by design. Local inference or an isolated resource hosted in France, systematic human oversight, editorial choice reserved to librarians: the time saved on enquiries and cataloguing is never paid for in lost confidentiality — borrowing histories feed no profiling. The aim is not to replace the librarian, but to give them back time for outreach.

The decisive point

Protecting readers' data: sovereignty & compliance

What users read is nobody's business but the library's. Here is how the architecture of our agents protects memberships and borrowing histories, library by library.

Local inference

The agent can run on a machine at the media library: no data leaves the network, nothing passes through a cloud.

Hosting in France

Otherwise, a dedicated and isolated resource, hosted in France under French law — readers' data: processing and access within the European Union targeted by the architecture.

Reduced extraterritorial exposure

Exposure of borrowing histories to the Cloud Act and FISA 702 is reduced by design; location alone does not guarantee immunity.

One isolated resource per establishment

No pooling of data: an environment strictly dedicated to your media library, guaranteeing the continuity of the public service.

Encryption & controlled access

Encryption in transit and at rest, role-based access (RBAC), strong authentication and logging.

AI Act: governed deployment

The agent is strictly in support; no profiling of readers; traceability and human oversight from end to end.

What depends on the architecture chosen These points are not general guarantees: they are settled deployment by deployment, in the quotation.

  • The applicable location is that of the architecture set out in the quotation and verified before commissioning.
  • Local execution is announced only for the configuration explicitly described and accepted in the quotation.
  • The applicable isolation depends on the deployment mode set out in the quotation; no dedicated isolation is presumed.
  • The encryption mechanisms in transit and at rest, their components and key management are those documented for the architecture chosen.
  • Roles and permissions are configured and accepted for the identities and systems actually connected.
  • The events logged, their content, their retention period and who may access them are defined for the deployment chosen.
For the most sensitive data, SecNumCloud and HDS options are available depending on your requirements. A single architecture is designed to answer both the GDPR and extraterritorial exposure. Designed for deployment in line with the GDPR and the AI Act, after the processing, roles and context-specific risks have been assessed.
Demonstration

See the agent at work

5 real situations, taken from those that come up most often. Pick one: the exchange unfolds as it would in your organisation.

A scripted demonstration. These exchanges show how the agent behaves — its sources, its refusals, what it leaves to your teams. Nothing is sent from this page, no model is queried here, and the matters named are fictional. That is precisely what we promise your data.
The behaviours shown here — monitoring, automation rules, routing and reminders — are configured with you during deployment, from your tools, your rules and your thresholds.
The architecture points named in these exchanges — location, local execution, isolation, encryption, role-based access, logging — are not a guarantee attached to the demonstration: they are those of the architecture set out in your quotation, and verified before commissioning.

The public body in this demonstration

Fictional public body

Trois-Rivières inter-municipal media library — a public reading network of three sites

Sector
Public reading — one main media library and two branches; 32 opening hours a week, cataloguing, cultural outreach and cultural programming
Staff
9 staff — a director, three librarians including the head of cataloguing, two conservation assistants, two front-desk staff and a digital outreach officer; cataloguing rests on one person
Public served
18,400 inhabitants, 4,300 active members, 61,000 loans a year and 21,400 searches a year on the network portal
Order of magnitude
34,000 records in the catalogue, 2,400 documents acquired and catalogued each year, 9,800 user questions, 34 themed selections and 96 events
Tools in place
Library management system, network portal, mailbox, telephone and events diary — the agent connects to them read-only, nothing is replaced or migrated
Who decides
The director settles acquisitions and cultural programming; the head of cataloguing approves every record before it enters the catalogue; the librarians sign off selections and outreach texts
The points to improve
1,100 catalogue records have neither summary nor subject indexing; 4,800 searches out of 21,400 return nothing; 3,724 questions arrive outside opening hours; a themed selection takes 6 hours; and 18 days separate a document's arrival from its place on the shelf

A fictional public authority, invented for the demonstration. At Trois-Rivières the team is not trying to do less: it is trying to spend more time in front of the public and less behind the catalogue. The data at stake is among the most sensitive a public service holds — what people read. The agent runs on local inference on a machine at the library, reads the catalogue and the records without ever writing to them, touches no borrowing history, and sends nothing into the catalogue without the approval of the head of cataloguing. The exchanges below cover a year, from the review of the catalogue to the report presented to the inter-municipal council.

This public body, its figures and the exchanges that follow were invented for the demonstration. They illustrate a common situation; they describe no real service.

Media library assistant · hosted in France
I read your 34,000 records over the weekend, and I draw from them a finding your catalogue was already carrying without anyone having the time to see it: part of your collections is on the shelf and impossible to find on the portal.
A record is the description of a document in the catalogue — title, author, publisher, summary, subject terms; it is the record, not the book, that the portal's search engine queries. Subject indexing is the setting of those subject terms: it is what makes a reader looking for « sea stories » find a novel whose title says nothing about the sea.
The measured gap, and it governs everything else: 1,100 of your 34,000 records have neither summary nor subject indexing. They are your retrospective records, entered before 2011 when the collection was computerised — retrospective cataloguing is the after-the-fact re-entry of old cards, done as fast as possible so that the collection exists in the software. This is no failure of work: it is a collection that was saved quickly, and that nobody has had time to reopen since.
What it costs the public, on your own logs:
· 21,400 searches on the portal last year, 4,800 with no result at all — 22 %.
· 1,900 of those 4,800 searches were for a document you had on the shelf, available, a few metres from the reader who left without it.
· And 61 % of those 1,900 searches are subject searches, not title searches — exactly what the absence of subject indexing makes impossible.
What I propose, and it is not a promise: it is already written. I prepared the 1,100 enriched records last night — a four-line summary, subject indexing, a shelfmark proposed according to your classification plan, each field carrying the source that filled it: your own record, the scanned title page, the publisher's reference. The fields I could not read are left empty and named, never guessed.
What it is worth, measured on the first 620 your head of cataloguing has already approved: searches with no result fell from 22 % to 14 % in six weeks, and 340 documents that had never left the shelf since they were entered were borrowed within the month.
The next step, and it takes twenty minutes a day: you read 40 records in the morning, in subject batches — I sort them by shelf so that the reading stays a reading of the collection and not a sorting task. The remaining 480 are approved in twelve days, and the whole older collection becomes searchable again. catalogue-review_1100-records-to-enrich.pdf4,800 searches with no result, 1,900 for documents on the shelf
⛓ Sourced · 34,000 catalogue records, portal search log, loan volumes — no individual borrowing history opened
You mention our loans. What our readers borrow is nobody's business, and that is the first point our council will press us on.
They are right to press you on it, and it is the point on which I am clearest: I open no borrowing history, and I do not need one to do everything I have just shown you.
What I read, and nothing else: the catalogue and the records — what describes the documents; the availability of a copy — on loan or on the shelf, without knowing by whom; and loan volumes by title and by shelf, that is to say numbers. Out of the 61,000 loans of the year, 0 has been tied to a person in anything I have produced.
What that means at the front desk: when I put forward six titles, they come from the catalogue and the records — from the subject, the reading level, the availability on the shelf. Never from what this reader has borrowed, never from what another reader borrowed before them. A suggestion built on other people's borrowing would be a profile, and a reading profile has no place in a public libraryit is the strongest guarantee you can display at the door, and it is verified line by line in the log.
Retention now, because that is where the guarantee really holds: how long a loan stays attached to a card is a setting of your management software, decided by the service — not by me. I do not extend it by one hour, I keep no copy of what your software erases, and the erasure is mirrored on my side at the same hour. Your current setting removes the link between a loan and a card when the document is returned; I checked it on all three sites, and it is applied on all three.
What I hand you so that this is written down in black and white: the state of the data, category by category — what is read, what is never read, what is kept, for how long, and who has access. It is the page your council will ask for, and the one your readers can read at the desk.
The next step I propose: put it up. A media library that writes on its door that borrowing feeds no recommendation says something no reading platform can writeand I have drafted it in plain language and in an easy-read version, ready to print. borrowing-secrecy_what-is-read-and-what-is-not.pdf0 history opened out of 61,000 loans, retention set by the service
✎ Framework · state of the library's data, retention settings of the management software on the 3 sites, access log
And where does all this run? Our membership files and reader records — which server do they end up on?
They go nowhere. I run on local inference on a machine at the media library, and nothing I read leaves the site's network.
Local inference means the model computes on your machine: the text of a record or a membership form crosses no external network to be processed. If the network would rather not host a machine, the other route is an isolated resource hosted in France, dedicated to Trois-Rivièresno pooling with another media library, which is the condition of continuity for your service.
What that changes, point by point:
· Your members' data trains no model, neither ours nor a third party's.
· I work read-only on your management software, and the technical account I read through has no right to writea record cannot enter the catalogue without a member of staff acting, and that is not a setting: it is a right that does not exist. It can be checked in one command, in front of you.
· Encryption in transit and at rest, role-based accessrights follow the job: front-desk staff see whether a copy is available, not membership files; the digital outreach officer sees the events diary, not loans. 9 roles for your 9 staff, and 0 out-of-role access in the log since go-live.
· Hosting in France, under French law, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
· Full log: who asked what, when, and what I produced. processing in the EU targeted over the year.
And you change no tool: I connect to your management software, your portal, your mailbox, your telephony and your events diary. No migration, no catalogue to re-enter, no extra subscription for your staff. Your public staff talk to me from Teams, Slack or their mailbox; your users reach me on WhatsApp, the portal chat, email or the phone — with no account to create and nothing to install.
The next step I propose: that I keep up to date the sheet your data protection officer and your council will ask for — hosting, data processed, retention periods, who has access to what. It is asked for once a year and takes two days to rebuild; the first version is written and you have it in front of you. technical-framework_where-reader-data-lives.pdfLocal inference, read-only, processing in the EU targeted
✎ Framework · deployment architecture, rights of the technical account, 9 roles open, first version of the register sheet
Local inference · no data outside the EU

Your case is not here? That is exactly what a 15-minute conversation is for. Book the free audit

Use cases

The uses of AI in a library and media library

Each use corresponds to an agent we deploy. All work in support, subject to the librarian's approval.

Included in your agent The 7 capabilities essential to this promise are included, at no extra cost.
From 840 € incl. VAT / month

Answering users

Answer on availability, loans, membership and opening hours, on every channel, 24/7.

Catalogue records

Preparation of records and summaries from the references, according to your classification plan.

Reading suggestions & outreach

Suggestions and outreach content written from the catalogue, for the team to approve.

Themed selections

Preparation of themed selections and their materials (display tables, reading lists, stands).

Opening hours, loans & renewals

Take the calls, inform on opening hours and prepare renewals, under the team's control.

Plain language & easy-read draft

Preparation of a plain-language version and of a draft easy-read (FALC) transcription, submitted for human validation.

Events programme

Inform on workshops and events and prepare the sign-ups, approved by the team.

Controls and safeguards These 5 controls are built into the agent: they frame what it does, whatever plan you pick. They are not chosen and are not added to your order.
Human validation, exceptions and escalation Status, safe closure and audit trail Sources, access rights and handling of questions with no answer Inherited access rights, versions and freshness of the corpus Explicit handling of questions with no answer and of conflicting sources
What the agent must be connected to This connection is required for the agent to work. It concerns your information system and is scoped during the audit.
Measurement of accuracy, coverage and time saved
Other needs our agents cover Each card says where the matching agent stands: available, on quote, or still being architected.

Multichannel administrative information

RAG on procedures; web, phone and front desk; 24/7; multilingual. Sourced answers.

On quote View the agent page

Accessibility, easy-read & translation

Part of the public remains cut off from public information: people who do not speak French, people with a cognitive disability, people uncomfortable with the written word.

On quote View the agent page

Need to go further?

These agents handle a different business process, with their own owner and their own price. They are added to this one.

Does your need fall outside this?

In 15 minutes we identify the agent that will give your staff the most time back — without oversizing the project.

Book the free audit Build your agent
The gain

How much time can a media library win back?

By automating everyday enquiries, cataloguing and the preparation of selections, a media library can aim for a clear reduction in time spent on repetitive tasks — reinvested in outreach and cultural programming.

Preparing a catalogue record
Today · done by hand
Prepared by the agent, to approve
Answering a user's everyday question
Today · done by hand
Automatic
Preparing a themed selection and its materials
Today · done by hand
Prepared by the agent, to approve
Qualitative, non-contractual comparison: the proportions shown illustrate the shift of the work towards review, they represent no measurement. Every output of the agent is reviewed and approved by a competent person.
How it works

The stages of your AI agent project

1

Audit & scoping

15 minutes to target the use case with the best return.

2

Quote or direct sign-up

A catalogue offer is bought online; a specific need gets a costed quote.

3

Design

We design the agent and its guardrails.

4

Integration & testing

We connect your tools to the agent, which is itself hosted in France.

5

Rollout

Going live and training your team.

6

Operation

Continuous supervision and improvement.

Pricing

Three options, one agent

A media library agent (answering users, catalogue records, outreach support), installed and operated for you. Choose according to how you are organised — available by direct award below the public procurement thresholds.

Agility

Setup + controlled subscription

9,960 € incl. VAT setup
then 840 € incl. VAT/month — you invest at installation and pay a reduced subscription. Ideal for keeping the cost under control over time.
  • Installation, configuration and training for your teams
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, a dedicated and isolated resource
Order →
The simplest Serenity

All inclusive, no setup fee

1,395 € incl. VAT /month
all inclusive, immediate start. No upfront investment: a single subscription. Ideal for starting quickly and simply.
  • Setup included (installation, configuration, training)
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, managed end to end
Order →
100% Sovereign

On site, you own it

14,396 € incl. VAT setup
then 1,080 € incl. VAT/month · + hardware from 2,989 € (one-off purchase, in addition) — a sovereign computer installed on your premises, maintained remotely. Models run locally, your data returned at the end of the contract. 36-month commitment.
  • Hardware installed on your premises (you own it)
  • French / European AI models run locally
  • Secure remote maintenance (Pro support included)
Order →
Not included in the packages: AI consumption (model tokens), re-invoiced at real cost with no margin, and tracked in real time in your client area. Maintenance and supervision subscription for an initial term of 12 months for the Agility package, 24 months for the Serenity package and 36 months for the 100% Sovereign package, renewable; support levels (SLA 72 h / 24 h / 4 h) optional. Bespoke development, additional integrations or exceptional volumes are quoted separately. Support Monday to Friday, 9am to 6pm. Prices include VAT at 20%: as a public body that is not VAT-registered, you cannot reclaim it.
AI model: none of the AI models offered currently carries a fixed surcharge. When the selected model carries a cost, that cost is shown when you choose it, before you order, and re-invoiced at the cost incurred, with no mark-up; usage is billed at the publisher's price. Publishers' prices are published in US dollars: the amount re-invoiced is the amount in euros actually borne by Blue Lemon Agent on the publisher's invoice, at that invoice's exchange rate, with no commission or mark-up.
Included components and additional components Components included in the base offer: the Blue Lemon Agent software foundation, the AI models listed in the order journey, the standard channels (Microsoft Teams, Slack, WhatsApp Business, email, website chat, calendars, Microsoft 365 / Google Workspace, file storage, market VoIP telephony, professional social-media pages and accounts, Google Business Profile), hosting in France for the package chosen, backups, supervision, updates and support. If adapting the AI agent to your constraints, your needs or your requests requires other paid components — a third-party publisher's software licence, paid API access to one of your applications, hosting of health data, for which French law requires an HDS-certified host (art. L. 1111-8 of the French Public Health Code), SecNumCloud-qualified hosting, a speech synthesis service, particular hardware —, they are offered to you as an option or on quotation and re-invoiced at the cost incurred; nothing is committed without your written agreement. Where the artificial intelligence model you choose entails an additional cost, that cost is shown to you before you order and re-invoiced to you at the cost incurred, with no margin.
What to expect
Go-live 2 to 3 weeks
Agent designed, channels connected, team trained.
Steady state 4 to 7 weeks
After a few weeks of real use, once the agent's behaviour matches what you expect. Indicative estimate, adjusted to the options you keep. It is not a delivery commitment.
Our commitment

Four guarantees that matter to a media library

Borrowing histories never leave the libraryLocal inference or an isolated resource hosted in France; no data entrusted to a foreign third party.
Data in France, under French lawFor borrowing histories: hosting under French law, native minimisation, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
The librarian keeps the decisionThe agent prepares records, selections and answers that can be checked; the choice of collections and the outreach stay human.
Human oversight & traceabilityFull traceability for answering users: monitoring, updates and logging compliant with the AI Act.
Frequently asked questions

Your questions, our answers

Does the agent replace the librarian?
No: it relieves them of repetitive enquiry and cataloguing tasks; the choice of collections and the outreach stay human.
Is the public's data protected?
Yes: hosting in France, an isolated resource, a deployment governed with regard to the GDPR; borrowing histories stay confidential.
Are borrowing histories confidential?
Yes: they are personal data; they stay hosted in France, with restricted access, and serve only the service provided.
Does the agent replace outreach work?
No: it relieves the team of repetitive tasks so that librarians have time for outreach and advice.
Does the agent state that it is an artificial intelligence?
Yes, from the very first interaction, and this is not a configuration option: since 2 August 2026, Article 50(1) of the European AI Regulation requires that any person interacting with an AI system be informed, unless this is obvious. The announcement is built into the greeting, in the other party’s language, and they can ask for a human at any time.
How long does it take to deploy an agent?
A few weeks as a rule, after a free audit that identifies the most useful use case, then a phase of design, integration and testing before going live and handing over to your teams.
Do we need a technical team in-house?
No: the agent is designed, installed and operated for you — integration, supervision and updates included. Your teams concentrate on their work, with guided familiarisation.
Do we have to change software?
No. The agent relies on your templates and complements your existing tools, with no migration imposed. We adapt the integration to your environment.
Which tools can users use to reach the agent?
The ones they already have. The agent answers on WhatsApp Business, the website chat and email: a user has no account to create and no application to install. Availability, a renewal, the time of a workshop: the answer arrives without a trip to the desk, and borrowing history stays strictly confidential, never repeated in a message. This is a lever for access to the service — WhatsApp and the telephone reach people an online form never does, which reduces the non-take-up of rights and serves equal access. Internally, your public-sector staff talk to the agent from Microsoft Teams, Slack or their email, without switching tools. Oversight runs from a web dashboard. These connectors rely on open standards, including the MCP protocol; they are included in every plan, at no extra cost, within the number of connections your level includes. Only the fees charged by the platforms themselves — WhatsApp Business bills per conversation — are passed on at actual cost, with no margin, outside the subscription.
Let's talk

Let's size up the potential in your media library

A few minutes to identify the most useful use case — hosted in France, supervised, with no commitment.