Ember theme
Paris Worked from Barcelona EU · CNIL Same hour as us

Paris.
Sovereign by design.

France asks a question about AI systems that most of Europe only gestures at: where, precisely, does this run, and under whose control. Sovereignty is not a talking point in Paris procurement — it is a line in the tender. Answering it well is a design decision made in the first week, and answering it badly is a rebuild.

Last reviewed 5 September 2026 · Engineering guidance, not legal advice.
WHAT IS ACTUALLY DIFFERENT HERE
01

The CNIL publishes, and it publishes early

France's supervisory authority has been unusually forthcoming about AI specifically, issuing recommendations on the development of AI systems rather than waiting to enforce against them. That is genuinely helpful: a great deal of what would otherwise be argued in the abstract has a published position to point at. It also raises the standard, because ignorance of a recommendation that exists in writing is a weaker defence.
02

Sovereignty is a procurement requirement

In public-sector and sensitive-sector tenders here, SecNumCloud qualification and comparable sovereignty conditions appear as requirements rather than preferences. We hold no such qualification and will not imply otherwise. What we do is build so the system can be deployed into infrastructure that does hold it, contracted by you — which means no hard dependency on a service that would fail the condition.
03

Three in-country regions to choose from

AWS eu-west-3 in Paris, Azure France Central and Google Cloud europe-west9 all sit in France, so keeping data on French soil is a normal configuration. Where that is still not sufficient — and in some tenders it is not, because the operator's ownership matters as much as the location — the answer is a qualified French provider or your own hardware, and open-weight models make that a real option rather than a downgrade.
04

Sector supervisors above the CNIL

Banking and insurance answer to the ACPR, markets to the AMF, and both to DORA on operational resilience and third-party dependency. Aerospace and defence work brings export control and classification rules that constrain what may be processed and by whom. None of these forbids AI. They decide where a person must remain accountable and what record you must be able to produce afterwards.
THE WORK THAT COMES OUT OF THIS CITY

Paris concentrates several industries that rarely share a city: the largest banks and insurers on the continent, the luxury groups, aerospace and defence, energy, and a very substantial public sector. Each produces a different AI problem, but the constraint they hold in common is that the output has to be explainable in French, to a French counterparty, sometimes under a regulator's eye.

Banking and insurance arrive with decisioning and with documents, usually both at once. A file is read, a judgement is made, and eighteen months later somebody asks how. The engineering that matters is the trace rather than the model, which is the whole subject of our risk and compliance architecture and of credit decisioning.

Luxury and retail groups have a harder version of an ordinary problem. Product search has to work across languages and across a vocabulary that the house itself defines, and the tone of any customer-facing text is a brand asset that a generic model will quietly destroy. That is a retrieval, ranking and evaluation problem before it is a generation problem — see merchandising and search.

Aerospace, energy and the public sector tend towards the deployment question first and the use case second. If the conclusion is that nothing may leave a controlled environment, then the model has to come to the data, and the sizing conversation becomes real: what runs on what hardware, at what cost, at what quality. Deployment options lays out the choices without pretending they are free.

French-language work also affects model selection. Open-weight families developed in Europe are frequently strong on French and can be self-hosted, which makes them a serious candidate rather than a patriotic one — our notes on Mistral models cover where that holds and where it does not.

HOW A PARIS PROJECT ACTUALLY RUNS
01

Discovery in Paris

Barcelona to Paris is under two hours in the air and a direct high-speed train if you would rather not fly. The opening workshop happens in your offices, and on a normal engagement it is not a separate line on the invoice.
02

Remote, on the same clock

France and Spain share a timezone, so there is no offset to manage at all. Your 09:00 is our 09:00 and your Friday afternoon is ours. Over a three-month build that is worth more than it sounds.
03

Back for handover

The handover session is your engineers operating the system while we watch and answer. After it, the code is in your repositories and it runs in infrastructure you contract for directly.
QUESTIONS
QUESTIONS — 5

No. We have one office and it is in Barcelona. We come to Paris for discovery, for handover and for anything that goes better in a room. In a city with this many real agencies, inventing a French address would be both unnecessary and obvious.

We can build a system that deploys into it, and we design so that nothing in the architecture depends on a service that would fail the requirement. What we cannot do is supply the qualification: we hold none, and the qualified provider would be contracted by you rather than by us. If a tender requires the integrator itself to be qualified, we are not the right supplier and will say so at the first call.

Yes. There are three in-country regions between the major providers, and open-weight models can run on infrastructure you control if the requirement goes further than location. Where a hosted model is part of the design we document its retention and training position at the time of writing, and you should verify it against the provider's current terms.

Our working languages are English, Spanish and Catalan, so workshops and documentation run in English unless your team prefers otherwise. That is a different question from whether the system works in French: it does, and we test it that way, with French-speaking reviewers on your side scoring real outputs rather than us assuring you it reads well.

The ranges on our pricing page, in euros and exclusive of VAT, the same in every city we work in. We do not price by postcode. Sovereign or on-premise deployment changes the infrastructure bill, which is yours and which we will size honestly, not our fee.

Keep reading
30-minute technical call · no deck

A Paris tender
with a sovereignty clause?

Thirty minutes on what the clause actually requires and what it does to the architecture. We will tell you if it rules us out.

CASE STUDIES

Shipped work.
Go and check it.

The work we can name, with the live site, our scope and the boundary made explicit. Select a project to see the evidence; each is a full case study, not a logo or a claim.

sonora.com
The Sonora homepage on desktop: a full-bleed dune landscape behind the headline “Transform Your Life with Sound”, with App Store and Google Play download buttons.
sonora.com — homepage, 1440×900 sonora.com →
Live Consumer wellness · Mobile + web

Sonora

Cognitive AI Ltd · 2026

A free sound-wellness app, described by its publisher as AI sound therapy that reads a short vocal sample at the start of a session and generates a soundscape for that moment. We designed and built the website and its backend, produced assets for the iOS and Android apps, and supported the application prototype.

Read the case study →

See every published project →

WHO WE HAVE BUILT FOR

Twenty-one years of applications, platforms and campaigns for names you know.

See all of our work →