Owned by the state. Run by the state.
Ministries, agencies, cantonal administrations and national programmes buy technology on behalf of citizens who did not choose the supplier and cannot take their custom elsewhere. The data belongs to the state, the obligations are statutory, and the system will outlast the government that commissioned it. Altuon builds for that condition: on national infrastructure, in the citizen's own language, with the capability left inside the administration when the engagement ends.
Ce qui est en jeu
Sovereignty is the first requirement and it is written into law. In Jordan, the Personal Data Protection Law sets the lawful bases for processing, the rights of the person whose data it is, and the conditions under which data may leave the country; the national digital-transformation policy directs services onto shared national platforms rather than onto whichever cloud a supplier prefers. In Switzerland, the revised Federal Act on Data Protection binds federal bodies directly, cantonal data-protection law binds the cantons, and both expect records of processing, impact assessments for high-risk processing and a clear answer to where the data sits and who can reach it. In the United States, a system that handles federal data runs inside an authorised boundary under the federal cloud authorisation programmes, with continuous monitoring rather than a one-time approval, and state agencies add statutes of their own. A supplier who cannot say, precisely, where every byte and every model weight lives has not yet made an offer the administration may accept.
Public procurement decides who may build, and the rules exist so that the decision can be defended. Under the Swiss Federal Act on Public Procurement and its cantonal counterparts, and under Jordan's public procurement framework, the requirement is published, the award criteria are fixed before the offers are opened, the award is reasoned and the losing bidder may appeal. The offer that wins is the one that can be scored against those criteria, not the one with the most persuasive demonstration. The contract then has to survive the supreme audit institution, a parliamentary committee and a freedom-of-information request. Every decision a system makes on a citizen's behalf has to be explicable to that citizen, to the ombudsman who receives the complaint and to the court that hears the appeal.
The systems already in place hold the authoritative record. The civil registry, the land registry, the commercial register, the vehicle register, the tax file and the case-management systems of the courts, the benefits agencies and the licensing offices were built long before the current law and are run by people who did not build them. They cannot be switched off for a weekend, and the state cannot tender its way out of them, because the record they hold has legal effect. Any programme that moves citizen services onto new infrastructure has to keep the chain of record unbroken, reconcile every migrated entry against its source and leave a rollback that a duty officer can execute at three in the morning.
The buyer is the state, and the state is several offices at once. The minister signs and answers to parliament for what the system does. The secretary-general wants a programme that will not become a headline. The head of the digital agency wants an architecture the administration's own engineers can run. The data-protection officer wants the processing record and the transfer analysis. The procurement office wants a contract with exit terms, escrow and a sub-processor list it can publish. The operations staff want to know who they call when the model says something wrong. A supplier who answers the minister and not the operators has sold a project; a supplier who answers all of them has built something the state can keep.
Pratiques applicables
- Intelligence artificielleSignature, là où Altuon mèneSovereign programmes in Arabic and English, with the models trained, tuned and served on national infrastructure, the weights held by the state, and a governance framework written so a minister can sign it and a parliamentary committee can read it. Every model has an owner, an evaluation set built from the administration's own cases, a bias review across the population it serves and a rollback version.
- Agents vocauxSignature, là où Altuon mèneCitizen service lines that understand Levantine, Gulf and Egyptian dialects as well as Modern Standard Arabic, verify identity to the level the service requires, answer within published procedure, and hand over to an officer with the whole context whenever the matter is one the agent may not decide. Recorded, retained and reachable on the days the office is closed.
- Conseil en technologieSignature, là où Altuon mèneNational digital-transformation programmes written as a sequence of defensible decisions: the obligation register, the residency decision per system, the transition states of each registry, and a sourcing strategy that builds a domestic team capable of running the platform rather than a dependence on the firm that built it.
- Intelligence de marchéSignature, là où Altuon mèneAssessments of technologies, suppliers, regulatory developments abroad and the moves of other governments, gathered from lawful and citable sources and written in the form of a cabinet paper, so a ministerial decision can be shown to have been informed and the evidence can be produced when a committee asks.
- Marque et identitéSignature, là où Altuon mèneIdentity systems for ministries, agencies and national programmes designed in Arabic first and Latin script second, with every typeface, mark and asset licensed to the state outright, and an architecture that stays coherent across administrations, reshuffles and the renaming a new government brings.
- Ingénierie logicielleCœurRegistries and case-management systems rebuilt one consumer at a time behind a compatibility layer, on sovereign infrastructure, with reconciliation against the source record, an audit trail that names who changed what and when, and a cut-over rehearsed until the rollback is boring.
Notes régionales
- Europe et DACH
- Swiss federal and cantonal administrations buy discretion, longevity and compliance in that order. The revised FADP and the cantonal data-protection acts decide the processing record, the impact assessment and the residency; the Federal Act on Public Procurement decides how the offer is written, scored and awarded, and the offer is written to be scored. German, French and Italian are working languages with Swiss German on the telephone, and a system for a cantonal administration is designed knowing that the neighbouring canton has its own law, its own registry and its own view. Altuon is present in Switzerland and expects to be audited there.
- Moyen-Orient et Afrique du Nord
- Jordan and the wider region are building national platforms under the Personal Data Protection Law and a digital-transformation policy that expects services on shared sovereign infrastructure, in Arabic first. The ministry wants a partner in the room rather than on a call, models that answer in the dialect the citizen actually speaks, and a programme that leaves a domestic team able to run it. Sovereignty here is not a hosting option; it is the mandate, and it covers the data, the model weights, the identity assets and the knowledge of how the system works. Altuon staffs these programmes as embedded teams whose stated purpose is to become unnecessary.
- Amérique du Nord
- US federal and state agencies buy outcomes at speed, inside boundaries that are authorised and then continuously monitored. A system that touches federal data runs within the federal cloud authorisation programmes, with the controls inherited from the platform documented and the controls the agency owns documented separately; state agencies add their own privacy statutes, records laws and procurement codes. The work has to move quickly, and every change has to leave the evidence an inspector general or a state auditor will ask for a year later.
Régions desservies
Europe et DACH
Siège
Turin, Italie
Mission représentative
- Voix9 septembre 2026Voice agents in Arabic dialects, and where they breakModern Standard Arabic is a written language. Callers speak Levantine, Gulf, Egyptian and Maghrebi, switch to English mid-sentence and read numbers in two directions. Here is where the systems fail, and what a bank or a ministry should demand before it lets one answer the phone.
- Intelligence artificielle9 septembre 2026Sovereign AI and Swiss data residency for financial institutionsA Swiss bank can use frontier models without sending a byte of client data abroad. It requires an architecture decision, not a vendor promise, and the revised Data Protection Act is clearer on the point than most vendors are.
Les questions qu’on nous pose
Can the data, the models and the model weights stay inside the country, on infrastructure the state controls?
Yes, and for a government engagement it is the default rather than an option. The data plane is decided per system in the Define phase and written into the architecture register: a national cloud, a government data centre, the administration's own premises or a Swiss region. Training, tuning and inference run inside that plane, the weights are stored there and belong to the state, and the control plane carries policy, identity and metrics but never citizen data. Where a model option cannot run within the footprint the state provides, the proposal says so and prices the alternative, so the sovereignty commitment is costed rather than assumed.
How do you work within public procurement rules, and can the offer be scored?
The offer is written to the published criteria in the order they are published, with a price sheet that separates licences, services, hosting and transition so the evaluation committee can compare it line by line with the others. Under the Swiss Federal Act on Public Procurement and comparable frameworks, Altuon accepts the standard conditions and negotiates only what the framework permits. Where an administration is still writing the requirement, the advisory model keeps Altuon out of the subsequent tender, and the engagement letter says so. Nothing in the offer depends on a demonstration the committee cannot verify from the documents.
Who owns the work, and what happens when the contract ends?
The state owns the deliverables: the source code, the models and their weights, the evaluation sets, the documentation, the identity assets and their licences, and the training material. Where Altuon uses components it developed earlier, the agreement grants a perpetual, irrevocable licence and names them. Source is held in the administration's own repositories from the first sprint, not delivered at the end. Exit terms include a handover period, a rehearsed transfer of operations to the state's own team or a successor, and the deletion of any copies Altuon holds, certified in writing.
How does a citizen service line handle dialects, and what does it do when it does not understand?
The speech and language models are evaluated against recordings from the population the service actually serves, dialect by dialect, before any release. Each release gate records the recognition and resolution rates per dialect, and a dialect the agent does not yet meet the threshold for is routed to an officer rather than served badly. The agent says plainly when it has not understood and offers the handover; it never guesses at an identity, a case number or an entitlement. The handover carries the transcript and the state of the case so the citizen does not repeat themselves.
How is a decision made or supported by a model explained to a citizen, an ombudsman or a court?
By design, not by reconstruction. Every model that touches a decision has a documented purpose, a risk class, the features it may use and the features it may not, an evaluation across the groups the service covers, and a record of each decision with the inputs, the model version and the officer who confirmed it where the procedure requires a person. A citizen who appeals receives the reasons in plain language; the ombudsman and the court receive the register. Where the law reserves the decision to a human, the model recommends and a named officer decides, and the record shows both.
How do you leave capability inside the administration rather than dependence on Altuon?
Embedded teams are staffed with the administration's own engineers, analysts and service owners alongside Altuon's from the first phase, with roles that transfer on a written schedule. Domestic sourcing is part of the sourcing strategy, not a preference expressed afterwards. Documentation is written for the operator, not for the auditor alone, and the state's team runs the release gates themselves before the engagement closes. The programme is judged complete when the administration can operate, change and re-tender the platform without Altuon in the room.
Bring us the service a citizen will call tomorrow.
Whether it is a national programme, a registry, a service line or the identity of a ministry, the Discover phase begins with your statutory obligations and ends with a register your data-protection officer, your procurement office and your minister can each sign. Request a proposal, or book a briefing for the officials who will be asked to answer for it.