Sovereign AI · Law 25
On-device AI for personal-information detection
- Challenge
- A document management platform had to locate personal information across thousands of documents to comply with Québec's Law 25, without sending a single document to the cloud.
- Solution
- An autonomous AI service installed on a dedicated machine inside the client's network: four detectors in parallel (two named-entity-recognition models on the machine's neural engine, entity dictionaries, 79 pattern rules) and a three-stage reconciliation with algorithmic validation.
- Technology
- Frozen NER models (CamemBERT, multilingual DistilBERT) compiled to Core ML, Python services, MariaDB integration, algorithmic checks (Luhn, RAMQ, MRZ, IBAN).
- Impact
- 42 categories of personal information detected automatically — zero cloud, zero external API, no LLM. Documents never leave the premises.
