+33 (0)1 87 66 00 65 · Monday to Friday, 9am–6pm Free audit (15 min)
● Public sector — Decision support & data analyst

AI decision-support agent: talking to your data in the public service

Preparing a dashboard, cross-checking files, producing a reliable figure for a council decision or a report takes a considerable amount of time — and often assumes command of a spreadsheet or a query language. Your AI agent turns a question asked in plain language into a figure and a chart, with its source. Hosted in France — on local inference or an isolated resource — public data stays under control. The public officer decides.

Hosted in France Public data protected GDPR & AI Act: governed deployment Human oversight

Updated on

Deployed in a few weeks
Decision-support assistant · hosted in France
For next week's finance committee, give me the trend in operating expenditure by department over 3 years, with a chart.
Data consolidated from the annual accounts and the general ledger. Operating expenditure moves from year N-2 to N with a moderate overall rise; two departments account for most of the gap (energy and payroll).
I have prepared a bar chart by department and a summary table, ready for the committee — to be checked.
⛓ Source · general ledger + annual accounts (isolated resource)
The energy item — how much more, and on which buildings?
The energy item rises markedly over the period, concentrated on three facilities (sports hall, town-centre school, town hall). Note: these figures mix volumes and tariff increases — the gap is not purely a drift in consumption.
I am preparing a reading note separating the volume effect from the price effect, for your approval.
✎ Action · note ready for review — the public officer approves
Local inference · no data outside the EU
Data hosted in France
Sovereign by designLocal inference or hosting in France
GDPR & AI Act: governed deploymentTraceability & human oversight
TurnkeyDesigned, installed and operated for you
The public officer decidesThe AI agent assists, never decides alone
✦ In brief

In a local authority, a central government department or a public body, a Blue Lemon Agent agent lets you query your data in plain language: you ask the question in ordinary words, the agent produces the figure, the dashboard and the chart, with the source — no spreadsheet and no technical query. It cross-checks the internal sources through a single point of entry. It runs on local inference or is hosted in France on an isolated resource: public data is never exposed to a foreign service, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity. The time saved goes back into analysis and decision-making. Illustrative reference points, to be validated by a pilot.

100%
hosted in France in the target architecture
0
transfer outside the EU in the target architecture
9
uses ready to deploy on this scope
0
decision taken without human approval

Reference points describing our offer, not results measured at a client. The scale of the gain is confirmed by a pilot on your own scope.

The context

Why decision support matters to the public sector — and why it hesitates

Elected members, directorates and audit bodies expect reliable figures, quickly, to steer public service. But producing an indicator often means a detour through a spreadsheet, and the data involved — finances, HR, the public — is among an administration's most sensitive.

! The issue

The administration is caught between a growing demand for data-driven steering (transparency, performance, accountability) and data scattered across tools that do not talk to each other. Yet most consumer AI solutions amount to entrusting financial, HR and citizen data to a third party, often hosted outside Europe and subject to the Cloud Act — which is unacceptable for public data.

Our answer

Decision-support AI is only of interest to an administration if it is sovereign and confidential by design. Local inference or an isolated resource hosted in France, systematic human oversight, decisions reserved to the public officer: the time saved on preparing the figures is never paid for in lost confidentiality. The aim is not to replace human analysis, but to give back thinking time to interpret and decide, while respecting equal treatment.

The decisive point

Confidentiality of public data: sovereignty & compliance

An administration handles sensitive data — finances, staff, the public. Here is how the architecture of our agents protects it, source by source.

Local inference

The agent can run on a machine belonging to the authority: no data leaves the network, nothing passes through a cloud.

Hosting in France

Otherwise, a dedicated and isolated resource, hosted in France under French law — your data: processing and access within the European Union targeted by the architecture.

Reduced extraterritorial exposure

Exposure of public data to the Cloud Act and FISA 702 is reduced by design; location alone does not guarantee immunity.

One isolated resource per entity

No pooling of public data: an environment strictly dedicated to your administration.

Encryption & controlled access

Encryption in transit and at rest, role-based access (RBAC) for elected members and directorates, strong authentication and logging.

AI Act: governed deployment

An agent strictly in support; no automated decision; traceability and human oversight from end to end.

What depends on the architecture chosen These points are not general guarantees: they are settled deployment by deployment, in the quotation.

  • The applicable location is that of the architecture set out in the quotation and verified before commissioning.
  • Local execution is announced only for the configuration explicitly described and accepted in the quotation.
  • The applicable isolation depends on the deployment mode set out in the quotation; no dedicated isolation is presumed.
  • The encryption mechanisms in transit and at rest, their components and key management are those documented for the architecture chosen.
  • Roles and permissions are configured and accepted for the identities and systems actually connected.
  • The events logged, their content, their retention period and who may access them are defined for the deployment chosen.
For the most sensitive data, SecNumCloud and HDS options are available depending on your requirements. A single architecture is designed to answer both the GDPR and extraterritorial exposure. Designed for deployment in line with the GDPR and the AI Act, after the processing, roles and context-specific risks have been assessed.
Demonstration

See the agent at work

4 real situations, taken from those that come up most often. Pick one: the exchange unfolds as it would in your organisation.

A scripted demonstration. These exchanges show how the agent behaves — its sources, its refusals, what it leaves to your teams. Nothing is sent from this page, no model is queried here, and the matters named are fictional. That is precisely what we promise your data.
The behaviours shown here — monitoring, automation rules, routing and reminders — are configured with you during deployment, from your tools, your rules and your thresholds.
The architecture points named in these exchanges — location, local execution, isolation, encryption, role-based access, logging — are not a guarantee attached to the demonstration: they are those of the architecture set out in your quotation, and verified before commissioning.

The public body in this demonstration

Fictional public body

Town of Rocheveyre — municipality of 28,600 inhabitants, finance and performance department (fictional municipality)

Sector
Municipality of 28,600 inhabitants — one main budget and 3 ancillary budgets (drinking water, car park, municipal cinema), 14 operational departments, 44 municipal buildings and a social action centre with its own budget
Headcount
612 staff at 31 December; the finance and performance department has 9 people — a director, a management controller, 5 accounting officers and 2 performance analysts. The agent serves this department, the chief executive's office and the 14 operational departments; it touches neither payroll nor payment authorisation
Public served
28,600 inhabitants, 33 elected members of the council, 4 standing committees — finance, works, education, social affairs — each meeting 8 times, i.e. 32 dashboards a year, and 9 full council sittings
Order of magnitude
€46.8m of real operating expenditure, €18.2m of capital expenditure, €24.1m of payroll; 74,200 payment orders and 21,600 revenue orders issued in the year; 6 statutory reports; 1,460 figure requests put to the finance department by elected members and departments, and 240 requests to cross-reference files
Tools already in place
Finance software (accounts, commitments, procurement), HR and payroll system, time and absence management, document management for council resolutions, facility booking software, school catering software, and 340 spreadsheets kept by the departments — the agent reads them, nothing is replaced or migrated
Who decides what
The director of finance and performance signs off every figure before release; the chief executive validates the papers put to committee; the finance councillor presents them to the council; opening a dashboard to a department or an elected member is decided by the chief executive's office
Room for improvement
Preparing a committee dashboard takes 26 hours, 15 h 36 of which is consolidation alone; an elected member's figure request comes back in 6 days; the 340 departmental spreadsheets are reconciled only once a year, at closing; and 9 indicators presented to committee exist in two versions depending on the source queried — 5 of them have already been presented in both values over the last three financial years

At Rocheveyre, nine people run the performance function of a municipality with 612 staff: 32 committee dashboards, 6 statutory reports, 12 monthly budget positions and 1,460 figure requests a year, served from five applications that do not talk to each other and 340 departmental spreadsheets. The time is not lost in analysis — it is lost in the consolidation that precedes it, and in the back-and-forth to establish which scope is being discussed. The exchanges below cover a year, from reconciling the sources to the twelve-month review put to the council. The agent is hosted in France on an isolated resource, reads the finance software, the HR system and the operational applications without ever writing to them, and no figure leaves the finance department without its director's sign-off.

This public body, its figures and the exchanges that follow were invented for the demonstration. They illustrate a common situation; they describe no real service.

Decision-support assistant · hosted in France
I have reviewed your 1,460 figure requests for the year and reconciled, indicator by indicator, your five sources — finance software, HR system, time management, facility booking, catering software — together with the 340 departmental spreadsheets. This is the reconciliation that year-end closing never leaves time for.
What the count says: 1,118 of the 1,460 requests bear on just 11 indicators — more than three in four, 76.6%. Real operating expenditure, budget execution by department, payroll, headcount, absence rate, supplier payment time, capital carry-forwards, grants to associations, facility attendance, meals served, contracts awarded. The 11 indicator sheets are written, each with its scope, its cut-off date and the query that produces it, set out in plain language — they are waiting for you.
What the three items you can check against your own diaries are worth:
· Preparing a committee dashboard is 26 hours end to end, 60% of which goes on extraction, consolidation and formatting — 15 h 36. After: 18%, i.e. 4 h 40. The analysis and the commentary do not move: that is the work you want to keep.
· A request to cross-reference files is 5 hours, 23% of which goes on reconciling identifiers, scopes and vintages — 1 h 09. After: 10%, i.e. 30 minutes.
· An elected member's figure request travels through 6 h 40 of cumulative time today, 8% of which is actual keying — 32 minutes. After: 6%, i.e. 24 minutes. On this item the fiche is cautious, and rightly so: what shifts is not the time, it is the lead time — 6 days of waiting brought down to the minute.
And here is the gap the reconciliation surfaced, which no one had ever measured: 9 indicators presented to committee carry two different values depending on the source queried. Five of them have already been presented in both values over the last three financial years — headcount at 31 December at 612 and at 574, payroll at €24.10m and at €23.42m, the absence rate at 7.4% and at 5.9%, operating expenditure at €46.8m and at €51.3m, grants to associations at €1.42m and at €1.68m.
The total time returned, item by item: 940 hours over the yearat 151.67 hours a month, more than six months of work returned to a nine-person department.
The next step, and it takes thirty minutes: you read the 9 lines and tell me, for each one, which scope is the reference. Your director of finance settles the version, and the 9 go out reconciled in next month's committee dashboard. data-landscape_1460-requests-11-indicators.pdf1,118 requests on 11 indicators, the three items costed, 940 hours identified
⛓ Sourced · 1,460 figure requests over 12 months, finance software, HR system, time management, 340 departmental spreadsheets, final accounts N-2 to N
Nine indicators with two values is exactly what puts us in difficulty in the chamber. Where do these gaps come from, and how do we avoid creating more next year?
All nine come from the same cause, and it is not an arithmetic error: across the 9, zero addition mistakes. All nine come from an implicit scope. Two sources answer two different questions, each gives the right figure for its own question, and the word that separates them is written down nowhere.
The three costliest, to fix ideas:
· Headcount at 31 December — 612 against 574. The HR system counts every member of staff whose post exists; payroll counts those paid in December. The 38 in between are on career break, parental leave or outward secondment. Both figures are right; they do not answer the same question.
· Payroll — €24.10m against €23.42m. The accounting chapter also carries elected members' allowances, occupational health and statutory insurance, which payroll does not know about. €680,000 of gap, explained line by line.
· Absence rate — 7.4% against 5.9%. One denominator in calendar days, the other in working days. 1.5 points of gap for two words missing from a column heading.
What I have done on top, and what closing never leaves time for: I have written four scope-control rules, in the language of your own indicator sheets, and run them across 36 months of figures actually released — 96 dashboards and 18 reports. For each one I give you the number of alerts it would have raised, the share confirmed on examination, and what it would have let through — you choose on figures, not on a hunch:
· Rule A — a total of expenditure or income released without naming the budget concerned: 214 alerts over 36 months, 203 confirmed — 94.9%. The other 11 carried the mention in the document title, not in the table.
· Rule B — two values of the same indicator released less than 30 days apart: 88 alerts, 81 confirmed — 92.0%.
· Rule C — a headcount or a payroll figure released without the employment status retained: 76 alerts, 76 confirmed — 100%.
And here is what those three let through, because you must know it before you sign: 61 rates whose denominator had changed since the previous release fell into none of the three — absence moving from calendar days to working days is the textbook case. So I wrote rule D and ran it across the same 36 months: 61 alerts, 54 confirmed — 88.5%.
All four together: 439 alerts, 414 confirmed — 94.3%, and they cover 414 of the 447 divergences found over the period, i.e. 92.6%.
I advise against switching all four on the same day, and I cost that advice: all four together would produce 168 alerts in the first quarter, i.e. roughly 28 hours of examination for your management controller — in the middle of budget preparation. One rule per quarter is 7 hours each time, and you keep control of what you look at.
Bringing a rule into force stays with the department: a rule only goes live once approved by your director of finance — and that is precisely what makes the figure defensible in the chamber. I save you the writing and the measurement; the decision takes thirty minutes instead of a working group. scope-divergences_9-indicators-and-4-rules.pdfThe 9 two-valued indicators in detail, 4 rules tested over 36 months, 414 divergences of 447 covered
⛓ Sourced · 36 months of released figures (96 dashboards, 18 reports), indicator sheets, finance software, HR system
Finance, payroll, absences, facility attendance: these are our most sensitive data. Where do they go, and what do I tell the council when the question comes?
Nowhere outside your walls, and that is verified rather than promised.
Where I run: on an isolated resource hosted in France, under French law, dedicated to Rocheveyre and to no one else — or on a machine in the town hall if you prefer local inference, in which case nothing even leaves the network. No data is passed to a foreign service: exposure to the Cloud Act and FISA 702 is reduced accordingly, without location alone ruling it out — it is documented for the configuration chosen. No pooling between authorities: a strictly dedicated environment.
What I read, and what is not open to me: I have read-only access to the finance software, to aggregated HR data, to time management, to the operational applications and to the 340 spreadsheets. I have no write access at all: I produce tables, charts and draft papers, and a member of staff takes them on. Individual payslips, bank details, medical reasons for sick leave and individual staff files are not open to me at all — they play no part in computing a payroll total or an absence rate, and article 5.1.c GDPR requires precisely that only what serves the purpose be exposed. Every access is withdrawn with a word, and the withdrawal takes effect within the second.
I plug into what you already have: finance software, HR system, document management, operational applications and spreadsheets. No migration, no change of tool, no data re-entry — I sit on top, and the day you change finance software it is the connector that changes, not your history.
What you tell the council, and can show: every read is logged with its date, its reason and the object consulted; every figure produced carries the records it is drawn from; access is opened by role — an elected member of the finance committee, an operational department and the chief executive's office do not see the same thing; and the record of processing activities is already written, legal basis by legal basis — public interest task, article 6.1.e GDPR, for the authority's performance management.
The next step I propose: a quarterly thirty-minute review where I show you the access rights actually used and those that served no purpose — a useless access right is one to close, and I bring you the list rather than asking you for it. sovereign-framework_hosting-access-traceability.pdfWhere the data lives, who sees what, what is withdrawn with a word
✎ Framework · hosting architecture, role access matrix, read log, the authority's record of processing activities
Local inference · no data outside the EU

Your case is not here? That is exactly what a 15-minute conversation is for. Book the free audit

Use cases

The uses of decision-support AI in the public service

Each use corresponds to an agent we deploy. All of them work in support, subject to approval by the public officer.

Included in your agent The 5 capabilities essential to this promise are included, at no extra cost.
From 730 € incl. VAT / month

Steering dashboards

Indicators, interim positions and charts ready to comment on for committees and directorates.

Querying your data in plain language

Ask the question in ordinary words, get the figure, the table and the chart — with the source, and no technical query.

Cross-checking internal sources

A single point of entry over files and applications that do not talk to each other: finances, HR, departmental activity.

Budget & financial steering

Tracking execution, variances against budget, analysis of operating and investment expenditure.

HR data & payroll

Tracking headcount, absence and payroll, aggregated and anonymised for steering.

Controls and safeguards These 3 controls are built into the agent: they frame what it does, whatever plan you pick. They are not chosen and are not added to your order.
Human validation, exceptions and escalation Status, safe closure and audit trail Explain assumptions, uncertainties and the limits of the analyses
What the agent must be connected to This connection is required for the agent to work. It concerns your information system and is scoped during the audit.
Reconcile controlled sources with data quality and lineage
The gain

How much time can an administration win back?

By automating the consolidation of files and the formatting of indicators, a department can aim for a sharp reduction in the time spent preparing figures — reinvested in analysis and decision-making. Illustrative reference points, to be validated by a pilot.

Preparing a dashboard for a committee
Today · done by hand
Prepared by the agent, to approve
Cross-checking several source files
Today · done by hand
Near-instant
Answering an elected member's question on figures
Today · done by hand
Automatic
Qualitative, non-contractual comparison: the proportions shown illustrate the shift of the work towards review, they represent no measurement. Every output of the agent is reviewed and approved by a competent person.
How it works

The stages of your AI agent project

1

Audit & scoping

15 minutes to target the use case with the best return.

2

Quote or direct sign-up

A catalogue offer is bought online; a specific need gets a costed quote.

3

Design

We design the agent and its guardrails.

4

Integration & testing

We connect your tools to the agent, which is itself hosted in France.

5

Rollout

Going live and training your team.

6

Operation

Continuous supervision and improvement.

Pricing

Three options, one agent

A decision-support agent (querying data in plain language, dashboards, summaries), installed and operated for you. Choose according to how you work. Prices exclude VAT — annual subscription, the time it takes for the gains to settle in.

Agility

Setup + controlled subscription

11,215 € incl. VAT setup
then 730 € incl. VAT/month — you invest at installation and pay a reduced subscription. Ideal for keeping the cost under control over time.
  • Installation, configuration and training for your teams
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, a dedicated and isolated resource
Order →
The simplest Serenity

All inclusive, no setup fee

1,355 € incl. VAT /month
all inclusive, immediate start. No upfront investment: a single subscription. Ideal for starting quickly and simply.
  • Setup included (installation, configuration, training)
  • Operation, human oversight, updates and support
  • Sovereign hosting in France, managed end to end
Order →
100% Sovereign

On site, you own it

15,706 € incl. VAT setup
then 970 € incl. VAT/month · + hardware from 1,269 € (one-off purchase, in addition) — a sovereign computer installed on your premises, maintained remotely. Models run locally, your data returned at the end of the contract. 36-month commitment.
  • Hardware installed on your premises (you own it)
  • French / European AI models run locally
  • Secure remote maintenance (Pro support included)
Order →
Not included in the packages: AI consumption (model tokens), re-invoiced at real cost with no margin, and tracked in real time in your client area. Maintenance and supervision subscription for an initial term of 12 months for the Agility package, 24 months for the Serenity package and 36 months for the 100% Sovereign package, renewable; support levels (SLA 72 h / 24 h / 4 h) optional. Bespoke development, additional integrations or exceptional volumes are quoted separately. Support Monday to Friday, 9am to 6pm. Prices include VAT at 20%: as a public body that is not VAT-registered, you cannot reclaim it.
AI model: none of the AI models offered currently carries a fixed surcharge. When the selected model carries a cost, that cost is shown when you choose it, before you order, and re-invoiced at the cost incurred, with no mark-up; usage is billed at the publisher's price. Publishers' prices are published in US dollars: the amount re-invoiced is the amount in euros actually borne by Blue Lemon Agent on the publisher's invoice, at that invoice's exchange rate, with no commission or mark-up.
Included components and additional components Components included in the base offer: the Blue Lemon Agent software foundation, the AI models listed in the order journey, the standard channels (Microsoft Teams, Slack, WhatsApp Business, email, website chat, calendars, Microsoft 365 / Google Workspace, file storage, market VoIP telephony, professional social-media pages and accounts, Google Business Profile), hosting in France for the package chosen, backups, supervision, updates and support. If adapting the AI agent to your constraints, your needs or your requests requires other paid components — a third-party publisher's software licence, paid API access to one of your applications, hosting of health data, for which French law requires an HDS-certified host (art. L. 1111-8 of the French Public Health Code), SecNumCloud-qualified hosting, a speech synthesis service, particular hardware —, they are offered to you as an option or on quotation and re-invoiced at the cost incurred; nothing is committed without your written agreement. Where the artificial intelligence model you choose entails an additional cost, that cost is shown to you before you order and re-invoiced to you at the cost incurred, with no margin.
What to expect
Go-live 2 to 3 weeks
Agent designed, channels connected, team trained.
Steady state 4 to 7 weeks
After a few weeks of real use, once the agent's behaviour matches what you expect. Indicative estimate, adjusted to the options you keep. It is not a delivery commitment.
Our commitment

Four guarantees that matter to an administration

Public data never leaves the perimeterLocal inference or an isolated resource hosted in France; no data entrusted to a foreign third party.
Data in France, under French lawFor public data: hosting under French law, native minimisation, architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
The public officer keeps the decisionThe agent produces verifiable figures, tables and summaries, with the source; no decision is automated.
Human oversight & traceabilitySources and calculations behind the dashboards recorded, updates and logging: compliant with the requirements of the AI Act.
Frequently asked questions

Your questions, our answers

Do you need to code or master a spreadsheet?
No. You ask the question in ordinary words, the agent produces the figure and the visual, with the source. No technical query and no spreadsheet handling is required: the public officer concentrates on interpretation and decision.
Where does our data go?
It stays in France, on an isolated resource, with the deployment objective of processing and access operated within the European Union — or on local inference on a machine belonging to the administration. Your public data is covered by an architecture designed to reduce exposure to extraterritorial legislation, location alone not being enough to guarantee immunity.
Can it be opened to elected members and directorates?
Yes, with role-based access (RBAC) suited to each profile. Every user only sees the data and indicators within their own remit, with logging of what is consulted.
Does the agent connect to our existing applications?
Yes. It sits on top of your tools (financial software, HR system, document management, business files) without imposing a migration. It cross-checks those internal sources through a single point of entry, and we adapt the integration to your environment.
Are the figures produced reliable enough for a council decision?
The agent produces sourced and traceable figures, but they must always be checked by a public officer before any decision or publication. The AI agent assists, the public officer decides: that is a requirement of human oversight and of equal treatment.
How long does it take to deploy the agent?
A few weeks as a rule, after a free audit that identifies the most useful decision-support use case, then a phase of design, connection to the sources, testing and training of officers before going live.
Let's talk

Let us estimate the decision-support potential in your administration

15 minutes to identify the most useful use case — hosted in France, supervised, with no commitment.