☎ +33 (0)1 87 66 00 65 · Monday to Friday, 9am–6pm Discuss your project

We build Agents. You build the Future.

● Public sector offer — Risk prevention

DUERP and risk prevention: sourced drafts, decisions that stay with the public employer

Your agent prepares, documents and keeps up to date the draft DUERP and annual prevention programme, work unit by work unit. It links each proposal to its sources and its date, organises consultations and evidence, then submits each decision to the competent public employer.

Updated on

Timetable set after a scope audit
DUERP & prevention assistant · public sector
Prepare the DUERP update for the catering work unit.
Update proposal opened: dated facts attached to the unit, proposed rating with its calculation, actions to enter in the annual programme.
No individual data: the analysis covers the work situation, not people.
Nothing enters the document without your approval.
To approve: the proposed split, the rating, the actions and their owner. Decision-maker: the local authority executive, after the specialised committee's opinion.
Data hosted in France · sovereign model as an option
English interface as an option
Central, local, hospital branches
Collective preventionWork units and situations, never people
Human approvalRatings, actions and publications
No version overwrittenFingerprint and log for every version
Open exportsArchival PDF, CSV, JSON and manifest

For an organisation established outside the European Union, the law of its own country applies; at its request, we put equivalent safeguards in place (human review before any action, a log of the criteria, information for the people concerned).

✦ In brief

A Blue Lemon Agent agent for risk prevention in the public service: it collects the facts, proposes the split into work units, prepares the rating, the versioned DUERP and the annual prevention programme, then organises consultations and evidence. The public employer decides; in a local authority, the deliberative assembly adopts the document. The French version of these texts is authoritative.

13
modules included in the core offer
3
branches of the public service covered
0
individual indicator produced
0
decision with a legal or significant effect taken by an agent

These figures describe how the offer is designed, not results measured at a public employer.

Indicative estimate, to be confirmed by a pilot on your real files (general terms of sale, article 4).

Use cases

What does the agent actually do?

Thirteen included modules, all in support: each prepares, sources and traces; the public employer and the competent bodies decide.

Included in your agent The 13 capabilities essential to this promise are included, at no extra cost.
From 905 € incl. VAT / month

Legal corpus for all three civil services

Texts in force for central government, local government and public hospitals, with effective date, history and a citation for each article.

Work unit mapping

Proposed grouping by homogeneous work situations and exposures, never by address alone; the employer approves the split.

Participatory collection and source register

Observations, accidents, registers, reports, minutes: each item carries its origin, date, author and confidence level.

Hazard and risk reference

Physical, chemical, biological, organisational and psychosocial risks, violence, climate, exposure that differs by sex.

Configurable, explainable risk rating

Published method, calculation reproducible line by line, proposed value; no rating enters the document without human approval.

Versioned risk assessment document (DUERP)

Draft, consultation, approval, adoption, entry into force: every version is new, carries its fingerprint and stays readable.

Prevention programme (PAPRIPACT) and action tracking

Annual prevention programme: owner, deadline, cost, resources, collective indicator, proof of closure and reason for any postponement.

Social dialogue files

Documents prepared for the competent specialised committee, register of opinions, proposals and the answers given.

Local authority deliberation workflow

Draft deliberation and summary note for the deliberative assembly; no automatic referral or adoption.

Trigger events and update proposals

Major change or new information: the agent opens an update proposal; nothing is published without approval.

Durable exports, reversibility and manifest

Archival PDF, open CSV and JSON, a manifest and fingerprint for every export, approval log, complete hand-back.

Security, roles and data governance

Least-privilege roles, logging, separation of medical data, retention periods, register of subcontractors.

Obligations and deadlines dashboard

Deadlines, units not covered, orphan sources, actions without proof and documents to send, by unit and never by person.

Controls and safeguards These 10 controls are built into the agent: they frame what it does, whatever plan you pick. They are not chosen and are not added to your order.
Never assess, rate, profile or monitor any individual Never allocate tasks or produce any individual HR decision Refuse any request for an individual indicator, with no conditional activation Submit ratings, work units, priorities, actions, budgets, referrals, transmissions and publications to a recorded human validation Never ingest a medical file, diagnosis or named fitness restriction into the general corpus Before each deployment, prepare the qualification under the AI Act and the analysis of whether a DPIA is needed; if a DPIA is required, block go-live until it is completed Leave the determination of the legal basis to the public client; never consent by default Keep the matrix of the data actually processed, staff data included Name a hosting certification or qualification only with the provider, certificate, scope, dates and contract on record; never infer sovereignty from a location in France alone Never declare a CNRACL grant as secured, nor give individualised medical or legal advice
Add-on

Extend this agent's capabilities

These capabilities are layered onto the SAME agent, not another one. They are billed per grid tier, not at the price of an agent.

English language

Interface, document templates and demonstrator in English, reviewed; the French version of the texts prevails.

+ 450 € incl. VAT set-up, then 25 € incl. VAT / month — chosen in the checkout Choose my add-ons →
Additional standard connection

One more application with a documented API: authentication, field mapping, acceptance testing and monitoring. Third-party costs stay at actual cost.

+ 450 € incl. VAT set-up, then 50 € incl. VAT / month — chosen in the checkout Choose my add-ons →
Additional training session or workshop

A session requested beyond the scoping and training included in the core offer; one option per session.

+ 450 € incl. VAT, one-off — chosen in the checkout Choose my add-ons →
Additional capacity without architecture change

Storage, computing, document reading, model calls and backups beyond the core offer, re-invoiced at the supplier’s actual cost, with no extra set-up.

On quotation
Specific connector or legacy software

Non-standard interface, no connector, specific transformation or data takeover: priced on the workload shown.

On quotation
Additional partitioned public entity

A separate space: roles, circuits, corpus, exports and risk assessment document of its own for the new entity.

On quotation
Deployment on the customer’s infrastructure

Installation on a server or computer of the authority, hardening, backup, monitoring, acceptance testing and recovery procedure.

On quotation
Health-data hosting

When the chosen scope includes health data, the hosting architecture is studied and named in the quotation before any go-live.

On quotation
SecNumCloud-qualified hosting

For the entities and data concerned, the quotation names the qualified service, its holder and its qualification scope.

On quotation
Reinforced contractual archiving

Outsourced retention, integrity proof and hand-back according to the duration and volume agreed in the quotation.

On quotation
Does your need fall outside this?

In 15 minutes we identify the agent that will give your staff the most time back — without oversizing the project.

Build your agent
Demonstration

See the agent at work

6 real situations, taken from those that come up most often. Pick one: the exchange unfolds as it would in your organisation.

A scripted demonstration. These exchanges show how the agent behaves — its sources, its refusals, what it leaves to your teams. Nothing is sent from this page, no model is queried here, and the matters named are fictional. That is precisely what we promise your data.
The behaviours shown here — monitoring, automation rules, routing and reminders — are configured with you during deployment, from your tools, your rules and your thresholds.
The architecture points named in these exchanges — location, local execution, isolation, encryption, role-based access, logging — are not a guarantee attached to the demonstration: they are those of the architecture set out in your quotation, and verified before commissioning.

The public body in this demonstration

Fictional public body

Val d’Orbière community of municipalities — fictional local authority

Branch
Local government civil service, inter-municipal public body
Headcount
214 staff on 5 sites, within the core offer limits (authority profile)
Bodies
Local social committee and its specialised committee; community council
Prevention actors
Prevention adviser, prevention assistants, contracted occupational health service
Tools in place
DUERP as a PDF, occupational health and safety register, spreadsheet for the annual programme
Who decides
The president, as local authority executive, approves; the community council adopts the DUERP

The authority has kept its DUERP by address for several years. The central kitchen has new equipment and the summer was hot. The agent rereads the sources filed, proposes and prepares; every decision goes back to a named role. Everything is invented for the demonstration.

This public body, its figures and the exchanges that follow were invented for the demonstration. They illustrate a common situation; they describe no real service.

DUERP & prevention assistant · public sector

Fictional scenario — figures invented to illustrate how it works; no client result is claimed.

I have reread the DUERP in force, the source register and the annual programme.
· 61 observations recorded from January to September, 61 of 61 linked to a unit and a source; median time to link: 5 days.
· 2026 annual programme: 17 of 24 actions closed on proof, 5 in progress, 2 postponed with a reason.
· Version 3 of the DUERP is 7 months old; 2 units need reassessing after new information (kitchen equipment, heat readings).
My proposal: open an update proposal for these two units. Decision-maker: the director general of services sets the order of work; the prevention adviser approves the links. authority_profile.pdfHeadcount, sites, bodies source_register.csv61 observations dashboard.pdfDeadlines and collective indicators annual_programme_2026.csv24 actions
✎ Framework · Circular of 11 June 2024 on the occupational risk assessment document (DUERP) in the public service ; French Labour Code, Article R. 4121-2 ; General Civil Service Code (CGFP), Articles L. 811-1 and L. 811-2 — sources checked on 9 October 2026 · The French version of these texts is authoritative.
Staff reported more this year. Is that the effect of the tool?
The fictional register counts 38 observations in 2025 and 61 in 2026. In this fictional scenario, the number of recorded observations increases. The demonstration does not attribute the cause to the agent.
What is established: each observation carries its date, unit, source and confidence level. For catering, 19 observations: 12 in the central kitchen, 7 in the reheating kitchens.
Decision-maker: the prevention adviser qualifies the observations; the local authority executive arbitrates.
Modules involved: “Legal corpus for all three civil services” · “Participatory collection and source register” · “Trigger events and update proposals” · “Obligations and deadlines dashboard”. dashboard.pdf2025 and 2026 observations source_register.csvFilter by unit
Data hosted in France · sovereign model as an option

Your case is not here? That is exactly what a 15-minute conversation is for. Discuss your project →

Pricing

Agilité DUERP public: the standard core offer, orderable online

The core offer covers one public legal entity, one branch and the thirteen modules, up to 250 staff, 6 sites and 15 work units at initial scoping, with standard imports, backups, monitoring, business-hours support, acceptance testing and initial training. Beyond these limits, extra technical capacity is re-invoiced at actual cost; a new mapping, a new circuit, a specific data takeover or a specific connection goes through an option or a quotation. The HDS, SecNumCloud, on-premises, multi-entity and specific-connector variants, as well as reinforced contractual archiving, remain on quotation until their own architecture is validated. Prices include VAT, technical consumption re-invoiced at actual cost.

Agility

Setup + controlled subscription

10,945 € incl. VAT setup
then 905 € incl. VAT/month — you invest at installation and pay a reduced subscription. Ideal for keeping the cost under control over time.
  • Installation, configuration and training for your teams
  • Operation, human oversight, updates and support
  • Hosting in France, a dedicated and isolated resource
Order →
The simplest Serenity

All inclusive, no setup fee

1,515 € incl. VAT /month
all inclusive, immediate start. No upfront investment: a single subscription. Ideal for starting quickly and simply.
  • Setup included (installation, configuration, training)
  • Operation, human oversight, updates and support
  • Hosting in France, managed end to end
Order →
100% Sovereign

On site, you own it

15,841 € incl. VAT setup
then 1,170 € incl. VAT/month · + hardware from 2,989 € (one-off purchase, in addition) — a sovereign computer installed on your premises, maintained remotely. Models run locally, your data returned at the end of the contract.
  • Hardware installed on your premises (you own it)
  • French / European AI models run locally
  • Secure remote maintenance (Pro support included)
Order →
Not included in the packages: AI consumption (model tokens), re-invoiced at real cost with no margin, and tracked in real time in your client area. Maintenance and supervision subscription for an initial term of 12 months for the Agility package, 24 months for the Serenity package and 36 months for the 100% Sovereign package, renewable; support levels (SLA 72 h / 24 h / 4 h) optional. Bespoke development, additional integrations or exceptional volumes are quoted separately. Support Monday to Friday, 9am to 6pm. Prices include VAT at 20%: as a public body that is not VAT-registered, you cannot reclaim it.
AI model: none of the AI models offered currently carries a fixed surcharge. When the selected model carries a cost, that cost is shown when you choose it, before you order, and re-invoiced at the cost incurred, with no mark-up; usage is billed at the publisher's price. Publishers' prices are published in US dollars: the amount re-invoiced is the amount in euros actually borne by Blue Lemon Agent on the publisher's invoice, at that invoice's exchange rate, with no commission or mark-up.
Reference total cost over the initial 12-month commitment in Agilité: 21,805 € incl. VAT (10,945 € + 12 × 905 €) — excluding consumables and options.
Included components and additional components Components included in the base offer: the Blue Lemon Agent software foundation, the AI models listed in the order journey, the standard channels (Microsoft Teams, Slack, WhatsApp Business, email, website chat, calendars, Microsoft 365 / Google Workspace, file storage, market VoIP telephony, professional social-media pages and accounts, Google Business Profile), hosting for the package chosen, in France by default, backups, supervision, updates and support. If adapting the AI agent to your constraints, your needs or your requests requires other paid components — a third-party publisher's software licence, paid API access to one of your applications, hosting of health data, for which French law requires an HDS-certified host (art. L. 1111-8 of the French Public Health Code), SecNumCloud-qualified hosting, a speech synthesis service, particular hardware —, they are offered to you as an option or on quotation and re-invoiced at the cost incurred; nothing is committed without your written agreement. Where the artificial intelligence model you choose entails an additional cost, that cost is shown to you before you order and re-invoiced to you at the cost incurred, with no margin.
What to expect
Go-live 2 to 3 weeks
Agent designed, channels connected, team trained.
Steady state 4 to 7 weeks
After a few weeks of real use, once the agent's behaviour matches what you expect. Indicative estimate, adjusted to the options you keep. It is not a delivery commitment.
How it works

The stages of your AI agent project

1

Audit & scoping

15 minutes to target the use case with the best return.

2

Quote or direct sign-up

A catalogue offer is bought online; a specific need gets a costed quote.

3

Design

We design the agent and its guardrails.

4

Integration & testing

We connect your tools to the agent, which is itself hosted in France.

5

Rollout

Going live and training your team.

6

Operation

Continuous supervision and improvement.

The context

What does an AI agent bring to your prevention work?

Keeping the DUERP current, unit by unit, and linking every proposal to its sources: groundwork that a participatory approach makes essential. The national plan sets as an indicator 100% of public employers having an updated DUERP on 1 January 2028.

! The issue

The facts that matter for prevention exist — observations, registers, minutes, reports — but they are scattered. Linking them to the document, to the right unit and the right date is the work most often missing between two deadlines.

✓ Our answer

The agent assists the prevention process; it replaces neither the observation of actual work, nor the participation of staff, nor the prevention practitioners, nor the specialised committee, nor the decision of the public employer.

The decisive point

Public employees' data: protection and governance

Hosting, inference, administration, backups, support and access are described in the quote. Location in France is not sufficient, on its own, to guarantee the absence of extraterritorial access.

AI and people

Designed for collective prevention, the agent analyses work units and work situations without rating people or monitoring their performance. Human decisions remain in the hands of the employer and the competent actors. This design protects staff while giving prevention practitioners structured and traceable information.

Individual indicator refused

Any request for an individual indicator is refused in this product. Where applicable, it requires a separate project, a full legal qualification and the controls applicable to high-risk systems.

Health data

By default, the agent excludes diagnoses, medical records, named fitness restrictions and clinical data. If the chosen scope includes health data falling under Article L. 1111-8 of the CSP, certified HDS hosting is a deployment condition, not a discretionary option.

Trusted cloud

For entities falling within the scope of Article 31 of the SREN Act and the data concerned, the quote names the qualified cloud service, its holder, its qualification scope and the subcontracting chain. No SecNumCloud mention is displayed without this proof.

Legal basis

The legal basis is determined by the controller, most often the legal obligation or the performance of a task carried out in the public interest; staff consent is not used by default.

Impact assessment

Before deployment, the controller and its DPO document the legal basis, minimisation and the need for a DPIA. No go-live takes place as long as a required DPIA has not been completed.

CNRACL funding

2026 scale of the CNRACL National Prevention Fund, checked on 9 October 2026: equipment: fewer than 50 affiliates and fewer than 100 staff, with all the other official conditions; diagnosis + plan initiative: €3,000 per beneficiary affiliate, ceiling €200,000, reduction rules and collective bonus; plan only: €2,000 per beneficiary affiliate, ceiling €150,000, reduction rules and collective bonus; large employers: more than 5,000 affiliates, flat amount of €450,000 over three years, according to the conditions of the scheme. Non-automatic grant, subject to examination by the CNRACL and to the available funds.

What depends on the architecture chosen These points are not general guarantees: they are settled deployment by deployment, in the quotation.

  • The events logged, their content, their retention period and who may access them are defined for the deployment chosen.
The agent versions the documents, produces durable exports and logs validations. The employer remains responsible for the regulatory retention of the versions for 40 years, unless an archiving service is expressly provided for in the contract.
Our commitment

Four guarantees for your staff and your bodies

Nobody is assessedThe agent analyses work units and work situations; it does not rate, rank or monitor anyone.
The public employer decidesRatings, priorities, actions, budgets, referrals, transmissions and publications remain subject to human approval.
No version overwrittenEvery change creates a new version, with its fingerprint and its entry in the log.
Your data stays reversibleOpen PDF, CSV and JSON exports, with a manifest, at any time and at the end of the contract.
Frequently asked questions

Your questions, our answers

Does the agent produce a compliant DUERP on its own?
No. It collects, structures, cites, checks and prepares drafts. The process must remain participatory and based on actual work. The public employer validates; the competent bodies are consulted; in a local authority, the deliberative body adopts the document.
How often is the DUERP updated?
At least every year from 11 staff. Whatever the headcount, an update is also required upon a major change or when new information on a risk becomes known.
Does the PAPRIPACT depend on a threshold of 50 staff?
In the public service, the rules specific to social committees provide for an annual programme submitted for the opinion of the competent specialised committee. The references in force are Articles R. 253-23, R. 253-27 and R. 253-30 of the CGFP.
Does the agent currently file the DUERP on a national portal?
No. As of 9 October 2026, the operational opening and the enforceable arrangements of the portal have not been established by the official sources examined. The agent handles versioning and exports; the employer keeps the versions. Integration will be added once an official format is actually available.
Does the agent guarantee FNP funding?
No. It can help assemble and trace the documents. Several schemes require an up-to-date DUERP, but the CNRACL assesses eligibility and decides on the award within the limits of its funds.
Does the agent process medical data?
Not within its standard scope. Individual medical data and named fitness restrictions are excluded. If a need justifies health data, a separate GDPR/HDS review precedes any go-live.
Is it a high-risk AI system?
Classification depends on the purpose and the actual use. The standard product remains collective and documentary. It prohibits profiling, individual monitoring, performance assessment, task allocation and HR decisions. BLA and the client document the qualification before deployment.
Which CNRACL support schemes may concern the DUERP?
Several schemes of the CNRACL National Prevention Fund require an up-to-date DUERP. The agent helps document the date, scope and versions of the document. Eligibility, amount and award remain assessed by the CNRACL and are never guaranteed by BLA. Non-automatic grant, subject to examination by the CNRACL and to the available funds.
Let's talk

Let's frame your prevention approach

One conversation to place your branch, your work units and your bodies — no commitment.