+33 (0)1 87 66 00 65 · Monday to Friday, 9am–6pm Free audit (15 min)
● Public sector — Prefecture officer

AI agent for the prefecture officer (permits & residence)

An assistant that pre-assesses permit applications, checks the documents and prepares the replies — the state officer keeps the assessment and the decision. Hosted in France — on local inference or an isolated resource — identity and residence data never leaves the country. The AI agent assists, the public officer decides.

Hosted in France Identity data protected GDPR & AI Act: governed deployment The state officer decides

Updated on

Deployed in a few weeks
Prefecture assistant · hosted in France
Check this student residence permit renewal file is complete before assessment.
Check carried out. Eight documents out of nine in order: valid passport, current permit, 2025-2026 enrolment certificate, proof of address less than six months old.
The proof of means is missing — a draft request for the additional document has been prepared, for approval before sending.
⛓ Source · the current list of documents + the file as filed
A member of the public asks where their vehicle registration application stands. Prepare a reply.
Reply drafted: vehicle registration is handled by the national agency's online services; the email recalls how to track it online with the file number, and points to the prefecture's digital help desk for support in person.
Ready for review and sending.
✎ Action · email ready for review — the state officer approves
Local inference · no data outside the EU
Data hosted in France
Sovereign by designLocal inference or hosting in France
GDPR & AI Act: governed deploymentTraceability & human oversight
TurnkeyDesigned, installed and operated for you
The state officer decidesThe agent assists, never decides alone
✦ In brief

In a prefecture, a Blue Lemon Agent agent assists the officers responsible for permits — pre-assessment of applications, checking that documents are complete, letters requesting further documents, replies on progress — and directs the public to the national agency's online services. It runs on local inference or is hosted in France on a dedicated, isolated resource: identity and residence data is never exposed to a foreign service, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity. The assessment and the decision — on residence in particular — stay strictly human and recorded. Live within a few weeks. Your public-sector staff write to it from Microsoft Teams, Slack or their email, and your users reach it on WhatsApp Business, the website chat or email — with no account to create and nothing to install. Reaching the administration from the tool people already have means less non-take-up of rights and equal access to the service. These connections are included in every plan, at no extra cost, within the number of connections your level includes.

100%
hosted in France in the target architecture
0
transfer outside the EU in the target architecture
7
uses ready to deploy on this scope
0
decision taken without human approval

Reference points describing our offer, not results measured at a client. The scale of the gain is confirmed by a pilot on your own scope.

The context

Why AI matters to prefectures — and why they hesitate

Identity documents, residence, vehicle registration: the permits services handle considerable volumes of files, with timescales the public watches closely. Yet the data handled — identity, administrative status, residence — is among the most sensitive the state holds.

! The issue

Prefecture officers are caught between people who expect short waits and ever more files to check document by document. Yet most consumer AI tools amount to entrusting identity, residence status and supporting documents to a third party, often hosted outside Europe and subject to the Cloud Act.

Our answer

For data at the heart of the state, AI is only of interest if it is sovereign and confidential by design. Local inference or an isolated resource hosted in France, systematic human oversight, assessment and decision reserved to the state officer: the time saved on checking documents is never paid for in lost confidentiality, nor in the automation of a residence decision. The aim is not to replace the officer, but to give them back time for the files that need their judgement.

The decisive point

Protecting identity data: sovereignty & compliance

A prefecture handles data at the heart of the state: identity, residence, vehicle registration. Here is how the architecture of our agents protects it, service by service.

Local inference

The agent can run on a machine at the service: no data leaves the state network, nothing passes through a cloud.

Hosting in France

Otherwise, a dedicated and isolated resource, hosted in France under French law — identity data: processing and access within the European Union targeted by the architecture.

Reduced extraterritorial exposure

Identity data: architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.

One isolated resource per department

No pooling of data: an environment strictly dedicated to your prefecture, guaranteeing the continuity of the public service.

Encryption & controlled access

Encryption in transit and at rest, role-based access (RBAC), strong authentication and logging.

AI Act: governed deployment

The agent is strictly in support; no automated decision to issue or refuse; traceability and human oversight from end to end.

What depends on the architecture chosen These points are not general guarantees: they are settled deployment by deployment, in the quotation.

  • The applicable location is that of the architecture set out in the quotation and verified before commissioning.
  • Local execution is announced only for the configuration explicitly described and accepted in the quotation.
  • The applicable isolation depends on the deployment mode set out in the quotation; no dedicated isolation is presumed.
  • The encryption mechanisms in transit and at rest, their components and key management are those documented for the architecture chosen.
  • Roles and permissions are configured and accepted for the identities and systems actually connected.
  • The events logged, their content, their retention period and who may access them are defined for the deployment chosen.
For the most sensitive data, SecNumCloud and HDS options are available depending on your requirements. A single architecture is designed to answer both the GDPR and extraterritorial exposure. Designed for deployment in line with the GDPR and the AI Act, after the processing, roles and context-specific risks have been assessed.
Demonstration

See the agent at work

4 real situations, taken from those that come up most often. Pick one: the exchange unfolds as it would in your organisation.

A scripted demonstration. These exchanges show how the agent behaves — its sources, its refusals, what it leaves to your teams. Nothing is sent from this page, no model is queried here, and the matters named are fictional. That is precisely what we promise your data.
The behaviours shown here — monitoring, automation rules, routing and reminders — are configured with you during deployment, from your tools, your rules and your thresholds.
The architecture points named in these exchanges — location, local execution, isolation, encryption, role-based access, logging — are not a guarantee attached to the demonstration: they are those of the architecture set out in your quotation, and verified before commissioning.

The public body in this demonstration

Fictional public body

Prefecture of Vézère-Atlantique — prefecture of a department of 612,000 inhabitants (fictional administration)

Sector
Departmental prefecture, citizenship and legality directorate: foreign nationals' residence office, permits and regulations office, digital help desk; vehicle registration and driving licences go through the ANTS online services, the prefecture provides support
Headcount
418 staff at the prefecture, 31 of them in the citizenship directorate — 22 in the residence office (16 case officers, 4 drafters, a deputy and a head of office) and 9 in the permits and regulations office; the same people assess the files, write the letters and answer the applicants
Public served
612,000 inhabitants, 19,400 foreign nationals holding a valid residence permit, 4,300 registered non-profit associations in the department, 260 declarations of public demonstrations a year
Order of magnitude
12,000 permit applications filed a year — 9,600 renewals, duplicates and change-of-address requests, 2,400 first applications and changes of status; 3,100 letters requesting a missing document; 26,800 enquiries from applicants across four channels; 8,880 appointments at the residence desk, or 740 a month
Tools in place
National case-management application for foreign nationals, online appointment module, digital help desk mailbox, electronic signature folder, ANTS online services for vehicle registration and driving licences — the agent connects to them read-only, nothing is replaced or migrated
Who decides
The prefect signs decisions to grant or refuse; the head of the residence office settles every draft decision before signature; the 16 case officers validate every pre-assessment; the deputy head settles the letter templates; the data protection officer handles subject access requests
Room for improvement
3,100 of the 12,000 files filed during the year are incomplete — 26 %; an applicant waits 19 days for a written answer on the progress of their file; 1,840 emails are queued at the digital help desk on Monday morning; 7,380 of the 26,800 enquiries concern a vehicle registration or a driving licence, which are handled by the ANTS online services; and 23 % of residence-desk appointments are not honoured

At the prefecture of Vézère-Atlantique, 22 staff in the residence office assess 12,000 permit applications a year, write 3,100 letters requesting missing documents and answer applicants whose right to stay depends on a clock that is running. The exchanges below cover a full year, from the review of the backlog of filed applications to the report presented to the secretary general. The agent runs on local inference on a machine belonging to the prefecture: passports, permits, civil status records and residence situations never leave the state network. The prefect decides and signs; the agent prepares, checks, proposes and quantifies.

This public body, its figures and the exchanges that follow were invented for the demonstration. They illustrate a common situation; they describe no real service.

Prefecture assistant · hosted in France
I have reviewed the 12,000 permit applications filed this year, and the backlog has a shape nobody has had the time to draw.
What the count says:
· 3,100 files out of 12,000 are incomplete — 26 %. They take a place in the queue without being assessable.
· Those 3,100 files rest on five documents only. Proof of resources missing or incomplete: 1,040. Proof of address older than six months: 762. Current-year enrolment certificate, on student files: 528. Expired passport, or missing visa and entry-stamp pages: 441. Foreign civil status record not translated or not legalised: 329.
· 412 of those 3,100 files have an assessment deadline expiring in less than six weeks — and once that deadline passes, silence gives rise to a refusal the applicant can take to the administrative court without anyone here having decided it.
The item you can check against your own logs: a permit file takes 25 minutes of a case officer's time, 60 % of which — 15 minutes — goes to the completeness check alone: presence and validity of documents, admissibility conditions, consistency of the documents with each other. Across the 9,600 renewals, duplicates and change-of-address requests of the year, that is 2,400 hours spent checking documents.
What I have already done, overnight: the 12,000 files have been matched against the list of required documents in the version carried by your service note of 12 January 2026, and the 3,100 letters requesting the missing document are written, each naming the missing document, the ground that requires it, the filing deadline and the three ways to submit it.
The next step, and it takes an hour: you read five letter templates — five, not 3,100. The deputy head settles the wording, the head of office signs, and the 3,100 letters go out the same day. backlog-of-files_12000-filed-3100-incomplete.pdf3,100 incomplete files on five documents, 2,400 hours of checking measured
⛓ Sourced · 12,000 files from the foreign nationals' application, list of documents from the service note of 12 January 2026, log of assessment deadlines
There are sixteen of us assessing files, and the clock is running on every one of them. Nobody here has a week to go back over 3,100 files. Where do we start?
With 412 files out of 3,100 — and I have ranked them by the deadline that is running, not by order of arrival.
What the match against your filing logs says:
· 412 of the 3,100 incomplete files have an assessment deadline expiring in less than six weeks. In 361 of those 412 cases, a single document is missing. One letter, one document, one file back on track.
· The other 2,688 are handled at 168 a week over sixteen weeks, with nothing left waiting: they are written, they are queued, they go out at the pace you set.
On the deadline itself, I give you the text rather than my opinion: article R. 432-1 of the code on the entry and residence of foreign nationals and the right of asylum provides that silence kept by the administration on residence permit applications amounts to an implied refusal, and article R. 432-2 sets the period — four months as a rule, ninety or sixty days for certain permits. So I keep the clock on the period specific to each application, never on a single period applied to all. And one point that changes how your tracking tables read: issuing or renewing a receipt does not prevent that implied refusal from arising — the Conseil d'État said so in its opinion no. 499904 of 6 May 2025. Of the 412 files, 96 carry a valid receipt and were counted as « in progress » in your tracking: they are now counted against the real deadline.
And I advise against sending the 3,100 letters on the same day, with figures to back it: your observed return rate on document requests is 58 % at three weeks. 3,100 letters at once means roughly 1,800 returns in the same window, that is 1,800 documents to read, check and file for sixteen case officers. 412 then 168 a week spreads the load over four months and brings 3,100 complete files into the queue without ever saturating the office — and the first effect lands on the files whose deadline expires next month.
What that hour of reading gives you: five templates already drafted, each with the document named, the ground that requires it, the filing deadline and the three ways to submit it — desk by appointment, online service, post; a plain-language version of each; and the number of files each template unblocks: 1,040, 762, 528, 441, 329. You approve, or you change a word. The writing and the matching are done: the decision takes an hour instead of a week, and it remains the office's — which is exactly what makes it defensible before an applicant who challenges it.
The next step I propose: that I check every night the files filed or amended the day before, and write the missing-document letter within twelve hours of filing. No file will sit incomplete for three months without anyone noticing: it will be known the next day, and so will the applicant. document-request-letters_5-templates-3100-files.pdf5 templates to read, 412 files ranked by deadline, 58 % observed return rate
⛓ Sourced · articles R. 432-1 and R. 432-2 of the CESEDA, Conseil d'État opinion no. 499904 of 6 May 2025, observed return rate on your document requests
All of this assumes you read passports, residence permits, foreign birth certificates, sometimes court rulings. Where does that data go?
Nowhere. I run on local inference on a machine belonging to the prefecture, and what I read does not leave your network.
Local inference means the model computes on your machine: the content of a passport, a foreign birth certificate or a court ruling crosses no external network to be processed. If the prefecture would rather not run a machine, the other route is a dedicated, isolated resource hosted in France under French law, reserved to this department, with no pooling with another administration.
What that changes, point by point:
· Identity and residence data trains no model, neither ours nor a third party's.
· I work read-only, and the technical account through which I read has no write permission in the foreign nationals' applicationthat is checked with one command, which is worth more than a promise.
· Encryption in transit and at rest, role-based accessrights follow the job: a case officer opens the files in their own portfolio, the head of office opens the full log, the regulations office opens no residence file at all. 9 roles for your 31 directorate staff, and the log shows 0 out-of-role access since go-live.
· Hosting in France, under French law, architecture designed to reduce exposure to extraterritorial legislation, including against an American provider hosting in Europe — location alone not being enough to guarantee immunity, the exposure is documented for the configuration chosen.
· A full log: who asked for what, when, and what the system produced — that is the document you will produce the day an applicant exercises their right of access.
On the European framework, and again I give you the text rather than my opinion: point 7 (c) of Annex III to the EU regulation on artificial intelligence classifies as high risk the systems intended to assist competent authorities in examining applications for asylum, visa or residence permits — high risk, not prohibited, and the corresponding obligations apply on 2 December 2027 following the deferral carried by the Digital Omnibus package. What is already in force and what we meet today: article 22 of the General Data Protection Regulation, which gives every person the right not to be subject to a decision producing legal effects based solely on automated processingand that is exactly your organisation: the prefect decides, the agent prepares. And since 2 August 2026, article 50 of the same AI regulation requires that any person interacting with an AI system be informed: I introduce myself as a digital assistant of the prefecture in the first sentence, and the applicant can ask for a human at any time.
The figure that sums all this up: 0 identity or residence data out of the prefecture's network across 12,000 files reviewed, and 0 transfer outside the European Union.
What I propose: that I keep up to date the record-of-processing sheet your data protection officer will ask for — purposes, data processed, retention periods, who accesses what. The first version is written and you have it in front of you; it updates itself every time a new use is opened. technical-framework_where-identity-data-lives.pdfLocal inference, read-only, 0 transfer outside the EU, 9 roles
✎ Framework · deployment architecture, technical account rights, Annex III point 7 (c) of the AI regulation, first version of the record-of-processing sheet
Local inference · no data outside the EU

Your case is not here? That is exactly what a 15-minute conversation is for. Book the free audit

Use cases

The uses of AI in the permits service

Each use corresponds to an agent we deploy. All work in support, subject to the state officer's approval.

Included in your agent The 6 capabilities essential to this promise are included, at no extra cost.
From 1,005 € incl. VAT / month

Pre-assessment of permit applications

Pre-assess applications (identity, residence, driving licence, vehicle registration) and check files are complete before assessment.

Checking supporting documents

Read, extract and check the documents in a file; flag documents that are missing, expired or inconsistent.

Letters & notifications

Prepare the requests for further documents and the draft notifications, for approval before sending.

Replies on progress

Answer the public on the progress of their file, 24/7 and across channels, without tying up the counter. The steps that call for action — permit ready, missing document — are notified by text message.

Guidance to the online services

Guide people step by step through their online procedures and tackle digital exclusion.

Plain language & easy-read draft

Preparation of a plain-language version and a draft easy-read (FALC) transcription, subject to human validation.

Controls and safeguards These 7 controls are built into the agent: they frame what it does, whatever plan you pick. They are not chosen and are not added to your order.
Human validation, exceptions and escalation Status, safe closure and audit trail Sources, access rights and handling of questions with no answer Prepare without deciding: sourced rules, supporting documents, anomalies and explanation Guarantee the decision, signature, recourse and responsibility of the public official Record versions, access, criteria, actions and notifications Test for bias, false positives, fundamental rights and continuity of service

Need to go further?

These agents handle a different business process, with their own owner and their own price. They are added to this one.

Does your need fall outside this?

In 15 minutes we identify the agent that will give your staff the most time back — without oversizing the project.

Book the free audit Build your agent
The gain

How much time can a permits service win back?

By automating the completeness check, the letters requesting further documents and the replies on progress, a prefecture can aim for a clear reduction in time spent on repetitive tasks — reinvested in assessing complex files.

Checking a permit file is complete
Today · done by hand
Prepared by the agent, to approve
A letter requesting a further document
Today · done by hand
Near-instant
Full pre-assessment of a residence file
Today · done by hand
Prepared by the agent, to approve
Qualitative, non-contractual comparison: the proportions shown illustrate the shift of the work towards review, they represent no measurement. Every output of the agent is reviewed and approved by a competent person.
How it works

The stages of your AI agent project

1

Audit & scoping

15 minutes to target the use case with the best return.

2

Quote or direct sign-up

A catalogue offer is bought online; a specific need gets a costed quote.

3

Design

We design the agent and its guardrails.

4

Integration & testing

We connect your tools to the agent, which is itself hosted in France.

5

Rollout

Going live and training your team.

6

Operation

Continuous supervision and improvement.

Pricing

Three options, one agent

An agent for the pre-assessment of permits (checking documents, letters, replies to the public), installed and operated for you. Choose according to how you are organised and how demanding your security requirements are.

Agility

Setup + controlled subscription

11,270 € incl. VAT setup
then 1,005 € incl. VAT/month — you invest at installation and pay a reduced subscription. Ideal for keeping the cost under control over time.
  • Installation, configuration and training for your teams
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, a dedicated and isolated resource
Order →
The simplest Serenity

All inclusive, no setup fee

1,635 € incl. VAT /month
all inclusive, immediate start. No upfront investment: a single subscription. Ideal for starting quickly and simply.
  • Setup included (installation, configuration, training)
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, managed end to end
Order →
100% Sovereign

On site, you own it

16,191 € incl. VAT setup
then 1,270 € incl. VAT/month · + hardware from 2,989 € (one-off purchase, in addition) — a sovereign computer installed on your premises, maintained remotely. Models run locally, your data returned at the end of the contract. 36-month commitment.
  • Hardware installed on your premises (you own it)
  • French / European AI models run locally
  • Secure remote maintenance (Pro support included)
Order →
Not included in the packages: AI consumption (model tokens), re-invoiced at real cost with no margin, and tracked in real time in your client area. Maintenance and supervision subscription for an initial term of 12 months for the Agility package, 24 months for the Serenity package and 36 months for the 100% Sovereign package, renewable; support levels (SLA 72 h / 24 h / 4 h) optional. Bespoke development, additional integrations or exceptional volumes are quoted separately. Support Monday to Friday, 9am to 6pm. Prices include VAT at 20%: as a public body that is not VAT-registered, you cannot reclaim it.
AI model: none of the AI models offered currently carries a fixed surcharge. When the selected model carries a cost, that cost is shown when you choose it, before you order, and re-invoiced at the cost incurred, with no mark-up; usage is billed at the publisher's price. Publishers' prices are published in US dollars: the amount re-invoiced is the amount in euros actually borne by Blue Lemon Agent on the publisher's invoice, at that invoice's exchange rate, with no commission or mark-up.
Included components and additional components Components included in the base offer: the Blue Lemon Agent software foundation, the AI models listed in the order journey, the standard channels (Microsoft Teams, Slack, WhatsApp Business, email, website chat, calendars, Microsoft 365 / Google Workspace, file storage, market VoIP telephony, professional social-media pages and accounts, Google Business Profile), hosting in France for the package chosen, backups, supervision, updates and support. If adapting the AI agent to your constraints, your needs or your requests requires other paid components — a third-party publisher's software licence, paid API access to one of your applications, hosting of health data, for which French law requires an HDS-certified host (art. L. 1111-8 of the French Public Health Code), SecNumCloud-qualified hosting, a speech synthesis service, particular hardware —, they are offered to you as an option or on quotation and re-invoiced at the cost incurred; nothing is committed without your written agreement. Where the artificial intelligence model you choose entails an additional cost, that cost is shown to you before you order and re-invoiced to you at the cost incurred, with no margin.
What to expect
Go-live 2 to 3 weeks
Agent designed, channels connected, team trained.
Steady state 4 to 7 weeks
After a few weeks of real use, once the agent's behaviour matches what you expect. Indicative estimate, adjusted to the options you keep. It is not a delivery commitment.
Our commitment

Four guarantees that matter to a prefecture

Identity data never leaves the serviceLocal inference or an isolated resource hosted in France; no data entrusted to a foreign third party.
Data in France, under French lawDeployment objective: processing and access within the European Union for identity data; architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
The state officer keeps the decisionThe AI agent pre-assesses and prepares files that can be checked; no issue and no refusal is automated.
Human oversight & traceabilityMonitoring and logging frame the pre-assessment of permit applications; compliant with the requirements of the AI Act.
Frequently asked questions

Your questions, our answers

Does the agent decide whether a permit is issued?
No: it pre-assesses and prepares; the assessment and the decision, on residence in particular, stay human and recorded.
Is sensitive data protected?
Yes: hosting in France under French law, an isolated resource, SecNumCloud options according to how demanding your requirements are.
Does the agent issue the permits?
No: it pre-assesses and prepares the decision; issuing or refusing remains an act of the state officer.
Is identity data protected?
Yes: hosting in France on a dedicated resource, recorded access; for the most sensitive, local inference with no external call.
Do we have to change software?
No. The agent complements your existing business applications, with no migration imposed. The integration is defined at the design stage, respecting your security rules.
Do we need a technical team to run it?
No: the agent is designed, installed and operated by us. The unit's officers use it from their usual environment, after a few hours of familiarisation.
Does the agent state that it is an artificial intelligence?
Yes, from the very first interaction, and this is not a configuration option: since 2 August 2026, Article 50(1) of the European AI Regulation requires that any person interacting with an AI system be informed, unless this is obvious. The announcement is built into the greeting, in the other party’s language, and they can ask for a human at any time.
How long does it take to deploy an agent?
A few weeks as a rule, after a free audit that identifies the most useful use case, then a phase of design, integration and testing before going live.
Which tools can users use to reach the agent?
The ones they already have. The agent answers on WhatsApp Business, the website chat and email: users have no account to create and no application to install. This is a lever for access to the service — WhatsApp and the telephone reach people an online form never does, which reduces the non-take-up of rights and serves equal access. Internally, your public-sector staff talk to the agent from Microsoft Teams, Slack or their email, without switching tools. Oversight runs from a web dashboard. These connectors rely on open standards, including the MCP protocol; they are included in every plan, at no extra cost, within the number of connections your level includes. Only the fees charged by the platforms themselves — WhatsApp Business bills per conversation, and the gateway bills the text messages sent — are passed on at actual cost, with no margin, outside the subscription.
Can the agent notify users by text message?
Yes, as an option — and it is the channel that reaches the people the others never do. A text message arrives on an ordinary phone: no email address, no account, no app, no data plan and no smartphone. Telling someone by text message that their permit is ready, that a document is missing or that an appointment is confirmed means fewer entitlements going unclaimed and more equal access to the service. It is an outbound notification channel, not a conversation channel: users do not write to the agent there — they reach you on WhatsApp Business, the website chat or email. The message announces without detailing — never the reason, never the detail of the situation — and never contains a payment link, a login or a password: users reach the service the way they usually do. Delivery goes through a gateway established in the European Union; the messages sent are passed on at actual cost, with no margin, and the channel itself is an optional module, set out on the pricing page.
Let's talk

Let's size up the potential in your prefecture

A few minutes to identify the most useful use case — hosted in France, supervised, with no commitment.