Poitiers · Montreal
We design, build and run your artificial intelligence systems. They rely on your data, operate within your infrastructure and remain under your jurisdiction.
You have identified a need but not yet what artificial intelligence can bring to it. We analyse your processes and give you a reasoned assessment.
We design the architecture, build the system and integrate it into your existing business processes. Your teams find it inside the tools they already use.
An application in production has to be monitored and maintained. We take care of its availability, its performance and its evolution.
The solution analyses applications for ecological transition funding and checks their eligibility and completeness. Every decision is explainable and traceable, which lets caseworkers focus on the complex files. It won the Dis-ADEME challenge and is now being built into production.
Read the ADEME case
Audience measurement without cookies or a banner 
Mirage measures all of your traffic without dropping a single cookie, which makes the consent banner unnecessary. Your marketing decisions therefore rest on the whole of your visits rather than on the third who gave consent. We designed the product and we run it every day.
See Mirage Analytics
Automated GDPR audit in ten minutes 
Complio analyses your website (cookies, trackers, data transfers, forms) and produces a ranked report within ten minutes. The semantic analysis runs on Mistral, a French AI, hosted in Europe. DPOs also use it to audit their clients' websites and their subcontractors' too.
See Complio
Compliant, verifiable consent Cookilio blocks every non-essential script until the visitor has given consent, and you can verify it yourself in your browser. Every consent is timestamped and exportable, which is your proof in the event of an inspection. Neoloji, the Grand Poitiers technopole, adopted it to replace Axeptio.
Each stage is signed off with you before the next one begins. You stay in control of the budget and can stop at any point.
45 minutes
An engineer reviews your need, your data and your regulatory constraints. You receive a feasibility assessment setting out the proposed architecture and the timescales.
4 to 8 weeks
We build a prototype on a representative sample of your production data. You assess the results under your own conditions before committing to the next stage.
3 to 6 months
The system is integrated into your infrastructure and deployed on sovereign hosting, in Europe or Canada depending on your framework. Monitoring and logging are active from the day it goes live.
ongoing
We keep the system available and evolve it over time. Your contacts are the engineers who built it.
Many systems send your documents to an American provider, which can be compelled to hand them over to its own authorities.
Data changes, models age and usage shifts. A system that is delivered and then left alone loses its value within months.
The code written for you belongs to you. You can take it in house or hand it to another supplier whenever you decide to.
No data leaves Europe.
This has been our position since 2018. It shapes the architecture of every system we build.
Hosting, the AI model and the applicable law are all chosen at design time: your data stays within its jurisdiction — under GDPR in Europe, under Law 25 in Canada. Settled early, this choice costs nothing; reversed later, it costs dearly. We settle it from the outset.
Two in three visitors decline cookies. Conventional tools therefore measure a third of your audience and estimate the rest. Our systems measure all of it, so your decisions rest on observed figures rather than estimates.
A sovereign AI agency designs, ships and operates artificial intelligence solutions. Its clients' data stays in their jurisdiction, under their legal framework: the GDPR in Europe, Law 25 in Quebec. It stays out of reach of extraterritorial access laws such as the US Cloud Act. In practice, it comes down to three architectural choices. French or European models rather than American APIs, hosting subject to European law or your own servers. You own the code outright. DPLIANCE is a sovereign AI agency founded in Poitiers, France, in 2019, present in Montréal. We design AI agents with guardrails, document assistants (RAG) and business automations, integrated into your existing tools and operated day to day.
A GDPR-compliant AI agency demonstrates it through architecture, not just a declaration. The questions to ask are always the same: where is the data hosted, which subprocessors are involved. You also need to know who trains models on your data, and who owns the delivered code. At DPLIANCE, compliance has been a daily practice since 2019. Our GDPR compliance software equips more than 500 organisations, and our solutions run with a European host or on your own servers. Your data remains exclusively yours: zero third-party model trained on it, and the code belongs to you. In Quebec, the same framework applies under Law 25.
The cost of an AI project depends on three things: the state of your data, how deeply it must integrate, and your compliance constraints. We price in stages, from prototype to production, so you keep control of the budget and can stop at any step. A prototype built on your real data usually takes four to eight weeks; integrated production rollout, three to six months. ADEME's screening agent followed exactly that path: a prototype, a challenge won, then a mandate to take it into production. A first 30-minute conversation with an engineer is enough to get a range fitted to your case, with no commitment.
Yes. Mirage measures your audience without cookies, without fingerprinting and without identifiable personal data. The architecture removes the need for consent by design. This is what the CNIL calls the consent exemption for strictly necessary audience measurement tools. Mirage meets these criteria by design.
Google Analytics requires consent that most of your visitors refuse. Result: biased data, polluted by bots, that also feeds Google's own advertising network. Mirage measures your traffic without cookies and without consent, with reliable data hosted in Europe.
Our products run on Scaleway, a French cloud operator: servers in Europe, mostly in France, with no American subcontractors, CDN, backups and logs included. For a bespoke project, hosting follows your jurisdiction — European under GDPR, Canadian under Law 25. It's contractual and verifiable.
Thirty minutes over video, with no commitment. You describe your need, an engineer tells you what is feasible, with which data and under which regulatory framework. Your contact is an engineer from the team, not a salesperson. Prefer to write? We reply within 24 business hours.
A reply within 24 business hours, from a real person. No commitment.
