Dossier
Dossier 05 — Public administrations and the public sector
Audience: central government administrations, local authorities, public bodies, public services that deploy an AI tool for their staff or for the public (through a publisher that integrates ELYSÉA).
Identity: ethical cognitive infrastructure embeddable through an SDK; it does not talk, the administration's tool is what talks. ELYSÉA is neither a companion, nor a chatbot, nor a coach, nor a therapist, nor a wellness product, nor a medical device.
Status as of 2026-10-01: sales closed. No campaign results.
1. Their problem
- Obligations specific to public authorities: for a high-risk system, registration before use, otherwise they “shall not use that system” (translation) (AI Act art. 26 §8) [S-DRT-01]; high-risk systems already in service brought into compliance “by 2 August 2030 at the latest” (translation) [S-DRT-02].
- Fundamental rights impact assessment (art. 27) for public bodies that deploy a high-risk system; since 2026/1744, it may refer to the GDPR DPIA [S-DRT-02].
- Transparency towards the public: art. 50.1 [S-DRT-01]; in Switzerland, the person “has the right to know whether they are speaking or writing to a machine” (translation) (FDPIC) [S-DRT-12].
- Prohibition of emotion inference at work for its staff [S-DRT-01].
- Sovereignty and transfers: requirement of localisation and control over processors [S-DRT-03] (art. 28).
2. What they must understand, prove and use
| Point | Reading | Source |
|---|---|---|
| High-risk qualification | ELYSÉA: no (no biometrics, no emergency call triage, no medical purpose); the administration's end use may be, to be qualified by it | holding-seb-docs:docs/juridique/AIPD_ELYSEA_2026-09-30.md:558@8560b37 · [S-DRT-01] |
| Art. 27 impact assessment | Does not apply to ELYSÉA; reusable if the qualification of the end use changes | holding-seb-docs:docs/juridique/AIPD_ELYSEA_2026-09-30.md:564@8560b37 |
| Safety measurement | Require a published method, uncertainty, validated judges | [S-MES-01] [S-MES-12] |
| Voluntary commitments | AI Pact: governance strategy, high-risk mapping, AI literacy | [S-DRT-15] |
3. Frequent objections and answers
| Objection | Answer | Evidence |
|---|---|---|
| Sovereign hosting? | Firestore europe-west9 and Bedrock eu-west-3 on main; reservation: Supabase region eu-central-1 (Frankfurt), dashboard reading by Sébastien on 10-01 at 18:03, evidence M-I1 to be attached; paths to providers possibly outside the EU, being removed — OpenAI fallback, vector memory, voice (OpenAI TTS, Deepgram; removal from the brain decided on 10-01 at 11:27); reservation maintained until the deployment is verified. ELYSÉA does not call itself sovereign. | elysea-core:firebase.json:4@a5b9780e · holding-seb-docs:docs/juridique/AIPD_ELYSEA_2026-09-30.md:48@8560b37 |
| Dependence on an American model provider? | Four families of providers can be routed to; the administration will choose its model once BYOK is wired (not available today). | elysea-core:functions/src/core/byok/byokAllowlist.ts:10-15@a5b9780e · elysea-web:src/lib/publicFacts.ts:66-67@00c9c89 |
| Auditability for the Court of Audit or an inspector? | Per-response attestation with the build fingerprint, audit log kept for 6 months then purged (Sébastien's decision of 09-30). | elysea-core:functions/src/core/attestation/interactionAttestor.ts:4@a5b9780e · elysea-core:functions/src/core/sdk/sdkGuardianAuditHandler.ts:3@a5b9780e |
| Your public servants in distress? | Referral to public resources, without taking charge. | elysea-core:functions/src/core/guardian/canonGuardian.ts:70@a5b9780e |
| What performance? | to be measured — campaign in progress | — |
4. What ELYSÉA does for them
- Control before and after the model (
elysea-core:functions/src/core/security/owaspInputGuard.ts:5@a5b9780e,elysea-core:functions/src/core/pipeline/validateLLMResponse.ts:1094@a5b9780e). - Prohibitions that the publisher cannot switch off (
elysea-core:functions/src/endpoints/sdkSurface.ts:139@a5b9780e). - Emotions locked (
elysea-core:functions/src/core/sdk/sdkAppService.ts:68@a5b9780e). - Trace per response (P-08).
5. Compliance
- Public servants: the CSE (L2312-8 [S-DRT-04]) falls under private law. Decision (most protective option): the administration consults its competent staff representative body before deployment, as a company would.
- Public procurement: require in the specifications the supplier's DPIA, the register, the list of processors and their regions (
holding-seb-docs:docs/juridique/REGISTRE_TRAITEMENTS_2026-09-30.md:3@8560b37). - Switzerland: the FADP applies directly to AI [S-DRT-12] [S-DRT-13].
- Entity: the project holder is a Geneva sole proprietorship not yet registered. Decision: no response to a public tender before registration.
6. Path
- Qualification of the end use (high-risk or not) by the administration.
- DPIA (and art. 27 if high-risk).
- Consultation of the staff body.
- Pilot with a publisher, test key.
- Contract or agreement after the entity is registered.
7. Offer and pricing
Teams grid to equip staff: €30 / 18 / 9.60 per seat per year depending on total volume (elysea-web:src/lib/publicFacts.ts:49-56@00c9c89). Builder grid for a service to the public (elysea-web:src/lib/publicFacts.ts:44-47@00c9c89). Sales closed.
8. Concrete next step
Joint reading by the DPO and the CIO of the ELYSÉA DPIA and of the register. No bid for a tender before the entity is registered.
Dossier sources
S-DRT-01 · S-DRT-02 · S-DRT-03 · S-DRT-04 · S-DRT-12 · S-DRT-13 · S-DRT-15 · S-MES-01 · S-MES-12