Those whom the law binds, and for whom a hosting contract is no substitute for criminal law. Each profession has its own risk, its own rule, its own right gesture. The checkpoint and the proof are the same for everyone.
The risk: pasting an expert-report exhibit into a cloud AI. The rules: art. 11 CPP referring to art. 434-7-2 CP (up to 3, 5 or 7 years), art. 244 CPC in civil matters, art. 226-13 CP. The right gesture: the whole case file goes through the checkpoint in Mode 3; the AI works on pseudonymised exhibits; the signed audit is attached to the report.
Professional secrecy in detail (in French) →The risk: handing consultations and case files to a cloud third party. The rules: art. 66-5 of the Act of 31 December 1971, art. 226-13 CP. The right gesture: nothing leaves the firm; the AI's reply is validated occurrence by occurrence; everything sits in the sealed log.
Professional secrecy in detail (in French) →The risk: re-identifying patients in clinical reports and letters. The rules: art. L.1110-4 CSP, R.4127-4 CSP, art. 9 GDPR. The right gesture: the health tier, an AI mode that keeps the pathology and masks the identity, k-anonymity measured against the real population.
k-anonymity (in French) →The risk: a ledger, statements, payslips pasted into an AI. The rules: ord. 45-2138 art. 21, art. 226-13 CP. The right gesture: IBANs, company IDs, amounts and people go through the checkpoint; spreadsheets are read as exhibits in their own right.
Pseudonomia (in French) →The risk: your teams are already using AI, with your data inside it. The rules: GDPR, AI Act (deployer, art. 26). The right gesture: an official, tooled-up channel to AI instead of a ban that gets worked around, with a crossing register to produce.
Shadow AI: the silent risk (in French) →The risk: a citizen's file prepared with an AI outside the workstation. The rules: CGFP L.121-6 and L.121-7, art. 226-13 CP. The right gesture: a checkpoint on the workstation, with no dependency on a non-European provider, a proof enforceable at inspection.
Using AI without giving away your secrets (in French) →The risk: exposing a source while drafting a story with a cloud AI. The principle: protection of journalistic sources, safeguarded under French law. The right gesture: run the AI on pseudonymised material, offline, on the workstation.
Using AI without giving away your secrets (in French) →The clear-text exhibit is only read on your workstation. Secrecy is broken before pseudonymisation even exists if the checkpoint sits with a third party.
The checkpoint →The risk is reduced, never denied: human review is a quick gesture, every correction is tracked (AI Act art. 14).
Compliance →To the DPO, to a judge, to the bar association: signed audit, sealed log, a verifier that works without us, in ten years.
The proof →The constraint is the same wherever there's a secret to keep — let's talk about it.
Request access