by Nodical
FRENES
Follow the project

ASDIC is a 2027-2028 research project. Published measurements are those of the notebook; targets are targets.

Learn

Sovereign AI: what it means for a phone conversation

Published By Douglas DemartProject status as of 1 October 2026

In one sentence

For a phone conversation, “sovereign” is not a slogan but four verifiable answers — where the sound goes, who can hear it, how long it stays, which court decides — and today Nodical can give only two of the four; ASDIC exists for the other two.

A word that says nothing until you ask a question

“Sovereign AI” became a sales argument before it became a definition. For a phone conversation it breaks down into four questions that can be answered yes or no, with a name and an address: where does the audio travel and who hosts it; who can listen to it, read it or use it for something else; how long does it stay somewhere; and which law applies if something goes wrong. A vendor that cannot answer all four is not sovereign, whatever the colour of its flag.

What a voice is, in the eyes of the law

A voice recording is personal data as soon as it allows someone to be identified, which is almost always the case for a call. It is not, in itself, biometric data: the GDPR reserves that word for data “resulting from specific technical processing” of a person's physical or behavioural characteristics — the voiceprint computed to recognise them, not the call itself. The distinction matters: a model that learns to recognise a voicemail or an intent needs no voiceprint, and makes none. ASDIC will make none.

What the CNIL and the AI Act say

The CNIL, the French data-protection authority, has long set the rules for recording a call: the person must be told at the start of the call that it is recorded and why, must be able to object, access to recordings must be restricted and traced, and retention depends on the purpose — never “as long as we need it”. The AI Act adds two steps: since 2 February 2025, emotion recognition at work and in education is prohibited; since 2 August 2026, the regulation's general application date, a system designed to talk with people must make sure they know they are talking to an AI (Article 50). None of this is optional, and none of it is specific to “sovereign” Europe: it is the law that applies to any voice agent used in Europe, wherever the model runs.

What Europe is building

On 3 June 2026 the European Commission presented a package of two legislative proposals, one on semiconductors, the other on cloud and AI, with an open-source strategy: Europe says it wants to “no longer only regulate technology but build it”. On the ground, the EuroHPC joint undertaking counts nineteen AI Factories and thirteen antennas, including one in France, which offer SMEs and start-ups free support and access to computing power. That is where ASDIC plans to train: a model trained on European machines, by a French company, on European calls.

Nodical's four answers today, without make-up

Where? Workspace data and the recordings reused for model improvement are stored and processed in the European Union. Who? A customer's recordings belong to that customer; for model improvement they are pseudonymised and are never used to decide anything about the person, to contact them again, or for another customer; anyone called can object without giving a reason. How long? Three years at most for pseudonymised training data, then deletion or anonymisation. Which law? French and European law, Nodical being a French company.

And what is not sovereign yet: the agent's voice and speech recognition currently rely on an American provider, named as such in our privacy policy. Nodical owns, to date, no comprehension model of its own: zero percent, the starting figure shown on this site. That is precisely the point of ASDIC — a model whose weights and corpus belong to Nodical, that no provider can switch off, alter or read — and it is a target, to be held when it is measured.

How to read a sovereignty promise

Ask for the four answers, with names. “Hosted in Europe” does not say who operates the model or where it was trained. “GDPR compliant” is an obligation, not an advantage. “Proprietary model” does not say who owns it. A vendor that answers the four questions and names its subprocessors is telling you the truth; a vendor that answers with a flag is telling you nothing. Nodical publishes how it handles recordings, subprocessors included.

And in practice? how Nodical handles recordings

Sources

accessed on 1 October 2026.

  1. Règlement (UE) 2016/679 (RGPD), article 4, définitions « donnée à caractère personnel » et « données biométriques » — https://gdpr-info.eu/art-4-gdpr/
  2. CNIL, « L'enregistrement des conversations téléphoniques afin d'établir la preuve de la formation d'un contrat » — https://www.cnil.fr/fr/lenregistrement-des-conversations-telephoniques-afin-detablir-la-preuve-de-la-formation-dun-contrat
  3. Règlement (UE) 2024/1689 (AI Act), calendrier d'application — https://artificialintelligenceact.eu/implementation-timeline/
  4. AI Act, article 50 (transparence : informer la personne qu'elle parle à une IA), applicable au 2 août 2026 — https://artificialintelligenceact.eu/article/50/
  5. Le Fil IA, « Souveraineté IA : l'Europe change de posture » (paquet de la Commission du 3 juin 2026) — https://www.lefilia.fr/analyse/souverainete-ia-europe-mistral-juin-2026
  6. EuroHPC JU, AI Factories (19 usines d'IA, 13 antennes ; accompagnement gratuit des PME et start-up) — https://www.eurohpc-ju.europa.eu/ai-factories_en
  7. Nodical, politique de confidentialité (sous-traitants, durées, annonce en début d'appel) — https://nodical.ai/confidentialite

Corrections

No correction so far.