+33 (0)1 87 66 00 65 · Monday to Friday, 9am–6pm Free audit (15 min)
● Public sector — Management control & financial analysis

The AI management control agent: spot the variances, inform the steering

Consolidating budget data, finding the variance that matters, preparing the dashboard for the elected member or the director: this work takes a considerable amount of time, often at the expense of analysis. Your AI agent queries your financial data, explains the variances and prepares clear summaries. Hosted in France — on local inference or an isolated resource — public data stays under control. The AI agent assists, the public officer decides.

Hosted in France Public data protected GDPR & AI Act: governed deployment Human oversight

Updated on

Deployed in a few weeks
Management control agent · hosted in France
On the 2026 operating budget, where are the main variances against forecast as at 31 May?
Three notable variances as at 31 May. Chapter 011 (general expenses): +14% against forecast, driven by energy and maintenance. Chapter 012 (staff costs): on track, +1%. Revenue line 73 (taxes and levies): −6% against the expected collection pace.
I can break chapter 011 down line by line.
⛓ Source · budget data and payment orders from your financial system
Break down 011 and prepare a dashboard for Thursday's steering committee.
Chapter 011 broken down. 70% of the variance comes from the energy line (+38%) and 20% from building maintenance. The other lines are stable.
I have prepared a dashboard: execution by chapter, focus on energy, year-end projection — figures and charts to review before circulation.
✎ Action · dashboard ready for review — the public officer approves
Local inference · no data outside the EU
Data hosted in France
Sovereign by designLocal inference or hosting in France
GDPR & AI Act: governed deploymentTraceability & human oversight
TurnkeyDesigned, installed and operated for you
The public officer decidesThe AI agent assists, never decides alone
✦ In brief

In a local authority or a public body, a Blue Lemon Agent management control agent queries your financial data in plain language, detects budget and accounting variances and prepares steering dashboards. It runs on local inference or is hosted in France: public data is never exposed to a foreign service, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity. The time saved on consolidation is redirected towards analysis and decision support. The AI agent assists; the public officer keeps the lead on every figure circulated.

100%
hosted in France in the target architecture
0
transfer outside the EU in the target architecture
9
uses ready to deploy on this scope
0
decision taken without human approval

Reference points describing our offer, not results measured at a client. The scale of the gain is confirmed by a pilot on your own scope.

The context

Why public management control needs AI — and why sovereignty is not negotiable

Budget constraints are tightening and both elected members and directorates expect finer, more frequent, more readable steering. But available time is absorbed by consolidation, reconciliation and formatting — and an administration's financial data is among the most sensitive there is.

! The issue

The public management controller is caught between directorates demanding up-to-date positions and variance analyses, and manual consolidation work that keeps growing (extracts, reconciliations, formatting). Yet most consumer AI tools amount to entrusting budget execution, payroll, tax revenue and accounting data to a third party, often hosted outside Europe and subject to the Cloud Act.

Our answer

For an administration, AI is only of interest if it is sovereign and confidential by design. Local inference or an isolated resource hosted in France, systematic human oversight, decisions reserved to the public officer: the time saved on consolidation is never paid for in lost confidentiality. The aim is not to replace the management controller, but to give them back time for analysis and advice to decision-makers.

The decisive point

Confidentiality of public financial data: sovereignty & compliance

A local authority handles sensitive budget and accounting data, subject to strict rules. Here is how the architecture of our agents protects it, financial year by financial year.

Local inference

The agent can run on a machine belonging to the authority: no budget data leaves the network, nothing passes through a cloud.

Hosting in France

Otherwise, a dedicated and isolated resource, hosted in France under French law — your data: processing and access within the European Union targeted by the architecture.

Reduced extraterritorial exposure

Financial data: architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.

One isolated resource per entity

No pooling of financial data: an environment strictly dedicated to your administration.

Encryption & controlled access

Encryption in transit and at rest, role-based access (RBAC), strong authentication and logging.

AI Act: governed deployment

An agent strictly in support; no figure circulated automatically; traceability and human oversight from end to end.

What depends on the architecture chosen These points are not general guarantees: they are settled deployment by deployment, in the quotation.

  • The applicable location is that of the architecture set out in the quotation and verified before commissioning.
  • Local execution is announced only for the configuration explicitly described and accepted in the quotation.
  • The applicable isolation depends on the deployment mode set out in the quotation; no dedicated isolation is presumed.
  • The encryption mechanisms in transit and at rest, their components and key management are those documented for the architecture chosen.
  • Roles and permissions are configured and accepted for the identities and systems actually connected.
  • The events logged, their content, their retention period and who may access them are defined for the deployment chosen.
For the most sensitive data, SecNumCloud and HDS options are available depending on your requirements. A single architecture is designed to answer both the GDPR and extraterritorial exposure. Designed for deployment in line with the GDPR and the AI Act, after the processing, roles and context-specific risks have been assessed.
Demonstration

See the agent at work

5 real situations, taken from those that come up most often. Pick one: the exchange unfolds as it would in your organisation.

A scripted demonstration. These exchanges show how the agent behaves — its sources, its refusals, what it leaves to your teams. Nothing is sent from this page, no model is queried here, and the matters named are fictional. That is precisely what we promise your data.
The behaviours shown here — monitoring, automation rules, routing and reminders — are configured with you during deployment, from your tools, your rules and your thresholds.
The architecture points named in these exchanges — location, local execution, isolation, encryption, role-based access, logging — are not a guarantee attached to the demonstration: they are those of the architecture set out in your quotation, and verified before commissioning.

The public body in this demonstration

Fictional public body

Town of Marnecourt — municipality of 38,000 residents

Sector
Fictional authority — a municipality of 38,000 residents: schools, early years, sport and culture, roads, social action, with a main budget of €62m of which €48m operating and €14m capital
Headcount
820 staff, a finance department of 11 people including 2 in management control — a head and an analyst, serving 9 directorates and 62 services
Public served
38,000 residents, and directorates that need an execution position in order to decide — every euro tracked is a euro that funds a service to the public
Order of magnitude
14 budget chapters monitored, 21,400 payment orders and 3,900 revenue orders a year, 148 live contracts, €12.4m of commitments and €4.2m of carry-overs, 640 suppliers
Tools in place
Financial information system, accounting software, document management system and five years of budget execution archived — the agent plugs into them read-only, nothing is replaced and nothing is migrated
Who decides
The finance director approves every figure before it circulates; the chief executive rules on management measures; the public accountant alone judges payment; the elected assembly votes the budget and its amendments
Room for improvement
The monthly dashboard takes 14 hours to prepare and arrives three weeks after month end; a directorate's question about its own data waits 4 days for an answer; 6 contracts overran their envelope without being flagged before closing; and the annual accounts take 9 weeks to settle

At Marnecourt, two officers run management control for 62 services. Most of their time goes into consolidation, reconciliation and formatting, at the expense of the analysis that directorates and elected members need in order to decide. The agent runs on local inference on a machine of the town, reads the financial information system and five years of execution without ever writing to them, and circulates no figure without the finance director's approval. The exchanges that follow span one year, from the execution position at 31 May to the review presented to the management board.

This public body, its figures and the exchanges that follow were invented for the demonstration. They illustrate a common situation; they describe no real service.

Management control agent · hosted in France
I read your five years of budget execution last night — 5 financial years, 14 chapters, 98,000 payment orders — and I hand you the position at 31 May with three notable variances, each explained by the lines that carry it.
The three variances, and I give you straight away what causes them:
· Chapter 011, general operating costs: +14 % against forecast, that is €610,000 above the expected pace at 31 May. The variance comes 70 % from energy, up 38 %, and 20 % from building maintenance€427,000 and €122,000. The other lines are stable.
· Chapter 012, staff costs: +1 %. On track — and I say so because a chapter on track is information, not silence: it is your first spending item, and it is holding.
· Revenue chapter 73, taxes and duties: −6 % against the expected collection pace, that is €780,000. This is not lower revenue: it is a payment expected in April and received in June€640,000 of the €780,000 were already in by 20 June, and I give you the date of each receipt.
What producing this page costs today, on the three items you measure: your monthly dashboard takes 14 hours to prepare — that is the reference for my three figures.
· Preparation — consolidation, reconciliation, formatting — weighs 60 % of that time, that is 8 hours 24.
· Analysing a chapter's variance: 20 %, that is 2 hours 48.
· Answering questions asked of the data: 5 %, that is 42 minutes.
What I propose, and it is not a promise — the position at 31 May is already written: preparation falls to 12 %, the analysis of a variance to 8 %1 hour 41 and 1 hour 07. The dashboard stops arriving three weeks after month end: it is ready on the 3rd.
The next step, and it takes an hour: you read the detail of chapter 011, line by line, and I hand you the year-end projection with three costed measures. The management decision belongs to the chief executive — and I hand it to him within the hour, costed and sourced on your own payment orders. position-at-31-may_three-variances-explained.pdf011 at +14 %, 012 at +1 %, 73 at −6 %, each variance with its lines
⛓ Sourced · financial information system, 5 years of execution, 21,400 payment orders of the year, receipts log
Before we go further: is our data reliable? We spend endless time reconciling extracts that do not say the same thing.
It is, to 99.2 % after reconciliation, and I tell you exactly where the 0.8 % are — 174 payment orders out of 21,400.
What I did with your five years of execution:
· I reconciled the financial information system, the accounting software and your management statements, line by line. For the current year, 21,226 payment orders match perfectly.
· The remaining 174 fall into three families, and none is a keying error: 96 are accrued chargesan accrual is a cost committed during the year but invoiced after it closes; it belongs to the year it concerns, not to the one in which the invoice arrives —, 52 are postings corrected during the year, and 26 are adjustments relating to a previous year.
· For each of the 174 I give you the payment order, the date, the original posting and the posting retained. This is not a list of anomalies: it is the map of the points where two different extracts give two different figures, and it explains most of your manual reconciliations.
Financial memory now, because that is where you lose the most time without counting it: I have indexed your five years of budget resolutions, your budget amendments, your internal procedures and your activity reports. A question such as “what did the council vote on school meal charges, and when” is answered in 40 seconds, with the resolution attached, against 25 minutes of searching. Over the quarter, 148 such searches, that is 58 hours no longer spent searching.
And one thing I flag without being asked: 3 lines of your original budget carry an amount that a later amendment replaced, never carried into the working document your directorates consult. A budget amendment is a resolution that adjusts the voted budget during the year: it is the amount it sets that prevails. I found the three resolutions and set the old amount and the voted amount side by sidethe cumulative gap is €216,000, and it alone explained two of the reconciliations your analyst redid every month.
The next step I propose: that the reconciliation of the three sources run every night and that the map of gaps reach you in the morning. Your two officers will stop reconciling and start explainingexactly the shift your senior management is asking of you. reliability-and-financial-memory_174-gaps-explained.pdf99.2 % match, 3 lines not carried over, €216,000 explained
⛓ Sourced · financial information system, accounting software, management statements, 5 years of budget resolutions and amendments
All this assumes you read our budget execution, our payroll and our supporting documents. Where does that data go?
It goes nowhere. I run on local inference on a machine of the town, and no financial data leaves its network.
Local inference means the model computes on your machine: the amount of a payment order, a supplier's name or a payroll line never cross an outside network to be processed. If the department would rather not host a machine, the other route is an isolated resource hosted in France, dedicated to Marnecourtno pooling with another authority.
What that changes, point by point:
· Your financial data trains no model, neither ours nor a third party's.
· I work read-only on the financial information system and the accounting software, and the technical account through which I read has no write permissionno accounting entry can come from me, and that is checked with one command.
· Encryption in transit and at rest, strong authentication, and role-based accessrights follow the job: an analyst opens their directorate's execution, not the named payroll statements. 6 roles for your 11 finance staff, and the log shows 0 out-of-role access since go-live.
· Hosting in France, under French law, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
· Logging: which data was read, when, to produce which figure. It is that log that lets a calculation be redone two years later before the regional audit chamber.
One rule I hold in every case, and I give you straight away what renders the same service: no personal data appears in a management dashboard. Neither a benefit recipient, nor a member of staff, nor an individual situation: the purpose of management reporting does not justify it, and a dashboard always travels further than one imagines. What I produce instead, answering the same question: the aggregate by scheme, by band and by month, already calculatedon the discretionary family allowance: 1,240 recipients, 4 bands, average amount and three-year trend, without a single name appearing.
The figure that sums all this up: 0 financial data left the town's network across the 21,400 payment orders of the year, and processing in the EU targeted.
What I propose: that I maintain the record your data protection officer and your senior management will ask for — hosting, data processed, retention periods, who accesses what. It is requested once a year and takes two days to rebuild; the first version is already written and attached. technical-framework_where-financial-data-lives.pdfLocal inference, read-only, processing in the EU targeted
✎ Framework · deployment architecture, technical account permissions, matrix of the 6 roles, first version of the register record
Local inference · no data outside the EU

Your case is not here? That is exactly what a 15-minute conversation is for. Book the free audit

Use cases

The uses of AI for public management control

Each use corresponds to an agent we deploy. All of them work in support, subject to approval by the public officer.

Included in your agent The 9 capabilities essential to this promise are included, at no extra cost.
From 785 € incl. VAT / month

Dashboards & steering

Budget execution positions, indicators and year-end projections ready to comment on for the directorates and elected members.

Detecting variances & anomalies

Spots the gaps between forecast and actual, atypical variations and accounting anomalies, and explains them.

Querying the data in plain language

Ask a question about execution, a chapter or a department and get figures and charts, with no technical skills required.

Reconcile the documents with the management data

Extraction and checking of payment orders, invoices and the file's documents, to make the data reliable before analysis.

Accounting consistency checks

Evidencing balances, M57 consistency checks and detection of inconsistencies before the accounts are closed.

Contract & spending follow-up

Following the financial performance of contracts, commitments and outstanding amounts, to anticipate drift.

Analysis of public purchasing

Cross-checking purchase spending, tracking volumes by supplier and feeding the management control of acquisitions.

Summaries & steering notes

Writing analysis notes, activity reports and budget summaries from your own data, for approval.

The authority's financial memory

Instantly find a council decision, a budget procedure or an execution history in your archives.

Controls and safeguards These 3 controls are built into the agent: they frame what it does, whatever plan you pick. They are not chosen and are not added to your order.
Human validation, exceptions and escalation Status, safe closure and audit trail Explain assumptions, uncertainties and the limits of the analyses
What the agent must be connected to This connection is required for the agent to work. It concerns your information system and is scoped during the audit.
Reconcile controlled sources with data quality and lineage
The gain

How much time can a management control department win back?

By automating data consolidation and variance detection, a department can aim for a reduction by half in preparation time on recurring dashboards — reinvested in analysis and advice to decision-makers.

Preparing a steering dashboard
Today · done by hand
Prepared by the agent, to approve
Analysing variances on a budget chapter
Today · done by hand
Near-instant
Answering a question about the data
Today · done by hand
Automatic
Qualitative, non-contractual comparison: the proportions shown illustrate the shift of the work towards review, they represent no measurement. Every output of the agent is reviewed and approved by a competent person.
How it works

The stages of your AI agent project

1

Audit & scoping

15 minutes to target the use case with the best return.

2

Quote or direct sign-up

A catalogue offer is bought online; a specific need gets a costed quote.

3

Design

We design the agent and its guardrails.

4

Integration & testing

We connect your tools to the agent, which is itself hosted in France.

5

Rollout

Going live and training your team.

6

Operation

Continuous supervision and improvement.

Pricing

Three options, one agent

A management control agent (variances, dashboards, querying the data), installed and operated for you. Choose according to how you work. Prices exclude VAT — annual subscription, the time it takes for the gains to settle in.

Agility

Setup + controlled subscription

11,290 € incl. VAT setup
then 785 € incl. VAT/month — you invest at installation and pay a reduced subscription. Ideal for keeping the cost under control over time.
  • Installation, configuration and training for your teams
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, a dedicated and isolated resource
Order →
The simplest Serenity

All inclusive, no setup fee

1,410 € incl. VAT /month
all inclusive, immediate start. No upfront investment: a single subscription. Ideal for starting quickly and simply.
  • Setup included (installation, configuration, training)
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, managed end to end
Order →
100% Sovereign

On site, you own it

15,861 € incl. VAT setup
then 1,025 € incl. VAT/month · + hardware from 2,989 € (one-off purchase, in addition) — a sovereign computer installed on your premises, maintained remotely. Models run locally, your data returned at the end of the contract. 36-month commitment.
  • Hardware installed on your premises (you own it)
  • French / European AI models run locally
  • Secure remote maintenance (Pro support included)
Order →
Not included in the packages: AI consumption (model tokens), re-invoiced at real cost with no margin, and tracked in real time in your client area. Maintenance and supervision subscription for an initial term of 12 months for the Agility package, 24 months for the Serenity package and 36 months for the 100% Sovereign package, renewable; support levels (SLA 72 h / 24 h / 4 h) optional. Bespoke development, additional integrations or exceptional volumes are quoted separately. Support Monday to Friday, 9am to 6pm. Prices include VAT at 20%: as a public body that is not VAT-registered, you cannot reclaim it.
AI model: none of the AI models offered currently carries a fixed surcharge. When the selected model carries a cost, that cost is shown when you choose it, before you order, and re-invoiced at the cost incurred, with no mark-up; usage is billed at the publisher's price. Publishers' prices are published in US dollars: the amount re-invoiced is the amount in euros actually borne by Blue Lemon Agent on the publisher's invoice, at that invoice's exchange rate, with no commission or mark-up.
Included components and additional components Components included in the base offer: the Blue Lemon Agent software foundation, the AI models listed in the order journey, the standard channels (Microsoft Teams, Slack, WhatsApp Business, email, website chat, calendars, Microsoft 365 / Google Workspace, file storage, market VoIP telephony, professional social-media pages and accounts, Google Business Profile), hosting in France for the package chosen, backups, supervision, updates and support. If adapting the AI agent to your constraints, your needs or your requests requires other paid components — a third-party publisher's software licence, paid API access to one of your applications, hosting of health data, for which French law requires an HDS-certified host (art. L. 1111-8 of the French Public Health Code), SecNumCloud-qualified hosting, a speech synthesis service, particular hardware —, they are offered to you as an option or on quotation and re-invoiced at the cost incurred; nothing is committed without your written agreement. Where the artificial intelligence model you choose entails an additional cost, that cost is shown to you before you order and re-invoiced to you at the cost incurred, with no margin.
What to expect
Go-live 2 to 3 weeks
Agent designed, channels connected, team trained.
Steady state 4 to 7 weeks
After a few weeks of real use, once the agent's behaviour matches what you expect. Indicative estimate, adjusted to the options you keep. It is not a delivery commitment.
Our commitment

Four guarantees that matter to an administration

Financial data never leaves the administrationLocal inference or an isolated resource hosted in France; no budget data entrusted to a foreign third party.
Data in France, under French lawFor financial data: hosting under French law, native minimisation, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
The public officer keeps the decisionThe AI agent produces verifiable figures, analyses and dashboards; no circulation is automated.
Human oversight & traceabilityDashboards & steering: monitoring, updates and logging, compliant with the requirements of the AI Act.
Frequently asked questions

Your questions, our answers

Where is the financial data processed?
In France, on an isolated resource, with the deployment objective of processing and access operated within the European Union — or on local inference on a machine belonging to the authority. Budget and accounting data stays under French law, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
Do you need a data analyst to use it?
No: questions are asked in plain language; the agent returns figures and charts. An officer in the management control department queries the execution data directly, with no particular technical skills.
Does the agent connect to our financial applications?
Yes, to the main accounting and budget systems. The agent complements your existing tools (financial system, accounting software, document management) without imposing a migration. We adapt the integration to your environment.
Does the agent decide in place of the management controller?
No. The AI agent assists: it consolidates, detects variances, prepares dashboards and proposes verifiable analyses. The public officer approves every figure before circulation. No analysis is circulated automatically — that is a requirement of the AI Act and of our architecture.
Can it really explain budget variances, not just flag them?
Yes. The agent does not stop at spotting a gap between forecast and actual: it identifies the lines and items behind it, sets it against the execution history and prepares a quantified explanation, which the public officer reviews and completes.
How long does it take to deploy the agent?
A few weeks as a rule, after a free audit that identifies the most useful use case, then a phase of design, integration with your budget data and testing before going live and training your officers.
Let's talk

Let us estimate the potential in your authority

15 minutes to identify the most useful use case — hosted in France, supervised, with no commitment.