Pollux
Pollux is a sovereign French AI platform built only for SPSTI occupational health services. It queries more than a million occupational health documents plus the service's own files, and returns sourced, traceable answers hosted entirely in France.
What is Pollux?
Pollux is the AI platform published by In Astra SAS, a French company based in Castelnau-le-Lez, near Montpellier, and it is built for one audience only: French SPSTI, the inter-company occupational health and prevention services. The site introduces it as the first secure, sovereign platform that puts AI to work for every role in your SPSTI.
Underneath sits a document base of more than a million occupational health documents: the French Labour Code, INRS publications, occupational disease tables, toxicological data sheets and PRESANSE reference material, drawn from sources the publisher names, among them legifrance.gouv.fr, inrs.fr, presanse.fr, who.int and travail-emploi.gouv.fr. A service's own internal documents are added on top of that base. Every answer is sourced, traceable and immediate, and the headline claim is that searches that took twenty minutes now take one.
The platform is split into eleven named modules. ChatSST is the conversational assistant over the regulatory base and the service's documents. Cockpit is the dashboard, and the route out for your data. Veille runs a continuous regulatory watch with daily or weekly digests. Scribe rewrites and structures documents; Meet transcribes meetings and produces structured minutes; Wiki lets you browse the corpus file by file; Studio generates images, video and sound for awareness campaigns; Prédiag analyses risk by NAF code to support the company record and the DUERP; Certi+ tracks compliance and progress towards certification; Académie trains teams in the use of AI; and Pépétey builds slide decks from your own content. Translation and assisted drafting are announced as coming.
Five roles are addressed by name: occupational physicians, occupational health nurses, prevention specialists (IPRP), management and medical assistants. The pitch is aimed squarely at replacing Shadow AI, the unsupervised use of ChatGPT, Gemini or Claude on American servers, with an official, sovereign, specialised tool. Hosting is with OVHcloud in France, in HDS-certified datacentres, under French law, on auditable open-source models. Supervision, hosting, model upgrades and AI token costs are bundled into the AstraCare programme included in the subscription. Seventeen SPSTI customers are listed on the site.
What it does
- Question more than a million occupational health documents in plain language and get an immediate answer
- Trace every answer back to the source document it was drawn from
- Query the service's own internal documents inside a walled-off space
- Watch regulatory and scientific sources continuously and receive a daily or weekly digest
- Rewrite, structure and draft documents, and turn a meeting into structured minutes
- Map company risks by NAF code to support the company record and the DUERP
- Produce awareness material - images, video, sound and slide decks - from the service's own content
When to use Pollux / When not to
A quick filter to help you decide if Pollux is the right fit.
When to use Pollux
- French SPSTI, the inter-company occupational health and prevention services, which are the only customers the publisher addresses
- Occupational physicians, occupational health nurses and prevention specialists (IPRP) who need a regulatory answer in one minute instead of twenty
- Management teams and medical assistants who want an official tool in place of the unsupervised use of consumer chatbots the publisher calls Shadow AI
- Services with no dedicated IT department: In Astra takes on the knowledge base, development, integration, testing, hosting and updates
- Teams working under French law on sensitive material, who need every answer to point back to the document it came from
When not to use Pollux
- Any organisation outside occupational health: the publisher states flatly that no other sector is addressed
- Anyone looking for a general-purpose assistant, which the site rules out in so many words: no generalist AI dressed in your service's colours
- Teams expecting to process an employee's individual health record, since any request touching individual follow-up is redirected to the service's own staff
- Buyers who want public pricing, a free trial or self-service sign-up: the only way in is a quote and a guided rollout of about four weeks
- Non-French-speaking teams: the interface and the document corpus are French, and no other interface language is announced
How to use Pollux
A typical end-to-end flow, from setup to results.
- Start from the Pollux product page and ask for a conversation or a quote: there is no self-service sign-up
- Fill in the eight-step contact form (subject, name, organisation, role, work email, phone, need, consent); a reply is announced within 24 working hours
- Take a demonstration, remotely or on site, run on your service's real use cases
- Agree the scope and the milestones, payment being tied to those milestones, each one a decision point
- Go through the needs audit, then hand over your document base for integration
- Attend the three framing workshops per solution (scoping, follow-up, validation); In Astra takes on the rest
- Have the business modules configured for your roles, then run the test phases before go-live
- Train the teams at launch. Deployment is announced at four weeks on average for Pollux, although the publisher's SPSTI expertise page announces four to six weeks for its solutions in general
- Log in through a browser on the Pollux application with an email address and a password; the site says it is accessible on all devices
- Use the 30 days of feedback and corrections included after go-live, and export your content and data from Cockpit whenever you need to
Pros & Cons
Pros
- Strict sector specialisation: built for occupational health and for nothing else
- Answers are systematically sourced and traceable, each one pointing back to the original document
- Documented sovereignty: hosting with OVHcloud in France, in HDS-certified datacentres, under French law
- A commitment not to train on customer data, presented as contractual, alongside end-to-end encryption and partitioning per SPSTI
- A single subscription with unlimited licences for every member of staff and no seat limit
- AI token costs, hosting, supervision and version upgrades bundled into AstraCare, with no surcharge announced
- An Article 28 DPA attached to the contract, export and reversibility from Cockpit at any time, and seventeen named SPSTI customers with three signed testimonials on the site
Cons
- No public pricing whatsoever: no amount, no grid, no range, and the only way in is a quote
- No free plan and no free trial announced, and no self-service access
- A very narrow customer perimeter: French SPSTI only, the publisher stating that no other sector is addressed
- No general terms and conditions published; the site carries only a legal notice and a privacy policy
- No API documentation, no API claimed for the product, and no named third-party integration
- No published support address, the contact form being the only channel, and no social media account found on any of the pages reviewed; the product video is still announced as coming soon
- ISO 27001 is claimed for the infrastructure and the HDS certification belongs to the host OVHcloud rather than to In Astra, yet no certificate or number is published; no named list of subprocessors is published either, and the no-training commitment is a default contractual state rather than a setting the customer can switch on
Pricing & Plans
No price is published for Pollux. In Astra advertises a single subscription per service, with unlimited licences for all staff and no seat limit, and directs prospective buyers to a quote request through its contact form. No free plan and no free trial are announced for the product, and the publisher does not state their absence either. Since no amount, grid or range appears anywhere on the site, no entry price and no currency can be reported. The subscription is described as including unlimited licences, access to current-generation AI models, the CODEX databases, continuous updates of reference material, sovereign hosting, AI token costs and the AstraCare support programme, with no surcharge announced.
- a single subscription with unlimited licences for all staff
- quoted on request
Data, GDPR & hosting
A consolidated view of how Pollux handles your data.
GDPR overview
GDPR compliance is claimed explicitly and described as native, built in from the design stage. The publisher names the European AI Act (EU 2024/1689), says it keeps an up-to-date processing register and documents algorithmic transparency. A DPO is appointed and reachable at dpo@inastra.fr. A data processing agreement under Article 28 is said to be attached to the contract. Eight data subject rights are detailed, among them access, rectification, erasure, restriction, objection, portability, automated decision-making and withdrawal of consent, with a complaint route to the CNIL. The privacy policy carries a last-update date of 13 March 2026. One discrepancy worth flagging: section 08 of that policy provides for transfers outside the EEA under standard contractual clauses, while the Sovereignty page states there is no transfer of data outside Europe.
Who owns the data?
In Astra states that customer data stays the exclusive property of the SPSTI and is never used to train models for third parties. Each service holds its own data, isolated from the other services and encrypted end to end. Content and data can be exported at any time from the Cockpit module, and the publisher promises a supported exit: if the engagement stops, only delivered milestones are due and the content is handed back. For the website itself, In Astra SAS acts as controller and has appointed a DPO reachable at dpo@inastra.fr. No general terms and conditions are published, so the full contractual scope cannot be checked before a commercial conversation.
Reuse rights
Customer data is not reused by the publisher to train its models. In Astra words the commitment as no training, ever, and presents it as contractual; it also claims auditable open-source models and no dependency on a non-European supplier. There is no opt-out to switch on, because non-training is the default state rather than a setting. Customers keep the right to reuse their own content and to export it at any time through Cockpit. Separately, the privacy policy lists what In Astra does with the data the website collects: handling enquiries, improvement analysis, usage monitoring, technical incidents, access management, statistics, contracts and invoicing, audience measurement and prospecting, each resting on legitimate interest, consent or performance of the contract. Audience measurement is anonymised and cookie-free, hosted in France, passed to no third party, and keeps no IP address.
Data retention & training
Hosting summary
All data is hosted with OVHcloud, in datacentres located in France and certified HDS (Hebergeur de Donnees de Sante, the French health data hosting certification, held by the host and not by In Astra). The applicable law is French law. OVHcloud is identified in the legal notice as a SAS at 2 rue Kellermann, 59100 Roubaix, registered with the Lille Metropole trade register, and the site itself resolves to an OVH address in Lille, France. In Astra states that data is encrypted in transit and at rest, protected by firewalls and intrusion detection, with restricted access and staff awareness training, and that each SPSTI is partitioned from the others with end-to-end encryption. ISO 27001 is claimed for the infrastructure. On the website, only first-party cookies are used, audience measurement is cookie-free and hosted in France, and fonts are self-hosted. One reservation: section 08 of the privacy policy nevertheless provides for transfers outside the EEA framed by standard contractual clauses, which sits at odds with the Sovereignty page.
Where Pollux works
Country-level availability.
Available in
Things to keep in mind
Risks and trade-offs to weigh before adopting Pollux.
- Over-reliance and de-skilling: an immediate, well-sourced answer invites acceptance without opening the underlying document. The publisher itself frames the tool as freeing teams for analysis and decision, not as a substitute for their expertise, and confinement to a knowledge base reduces but does not remove the risk of a wrong or outdated answer
- The site contradicts itself on transfers outside Europe: the privacy policy provides for them under standard contractual clauses, while the Sovereignty page states there are none. Have the contract settle the point before signing
- The publisher's incorporation date cannot be established reliably, the available sources disagreeing with one another, so this record leaves it unset; check it at the French trade register yourself if it matters to your procurement
- ISO 27001 and HDS are claimed without any published certificate or number, and the HDS certification is held by the host OVHcloud rather than by In Astra: do not read it as a certification of the publisher
- Two further inconsistencies to raise: the deployment lead time reads four weeks on the Pollux page but four to six weeks on the expertise page, and the head office reads Castelnau-le-Lez in the legal notice but Montpellier in the footer of every page
- No general terms and conditions and no named list of subprocessors are published, so neither the contractual scope nor the processing chain can be examined before you are in a commercial conversation
- Pollux sits on the site of a multi-product publisher: do not credit it with the figures, the offers or the pricing terms of Andromeda, of the website chatbot or of Cariboost. The domain also carried a different positioning before the SPSTI focus, that of a digital agency specialised in AI, as the earliest web archive capture shows
Setup & Integrations
Technical difficulty
Low on the customer's side. In Astra describes a turnkey rollout, taking on the knowledge base, development, integration, testing, hosting and updates, with no infrastructure to run locally, an argument aimed at services with no dedicated IT team. Access is through a browser and no installation is mentioned. What the customer owes is time rather than technical skill: three framing workshops per solution (scoping, follow-up, validation), team training at launch and a part in continuous improvement. Deployment is announced at four weeks on average, with test phases beforehand and 30 days of corrections included.
Deployment
Supported languages
Behind Pollux
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Pollux.
Frequently asked questions
What is Pollux?
What data does it draw on?
How reliable are the answers?
Does Pollux replace the expertise of the teams?
How long does deployment take?
How much does it cost?
Who can use it?
Is my data used to train the models?
Is a data processing agreement available?
Is there an API or any third-party integration?
Should you pick Pollux?
Pollux is a deliberately narrow tool: one sector, one country, one type of customer. In Astra makes no attempt to widen it, stating outright that no sector other than occupational health is addressed, and that focus is the product's main argument. Rather than a general assistant repainted in a service's colours, it offers a base of more than a million occupational health documents, eleven business modules and answers that point back to the document they came from.
The sovereignty file is unusually precise for a publisher of this size: the host is named, the hosting country and the applicable law are stated, the models are said to be open source and auditable, and the commitment not to train on customer data is presented as contractual rather than as a promise. An Article 28 DPA is said to be attached to the contract, and export from Cockpit is available at any time.
The counterpart is total pricing opacity and the absence of published general terms. No amount, grid or range appears anywhere on the site, and the only route in is a quote. The contractual scope cannot be checked publicly either, since only a legal notice and a privacy policy are published. The publisher is young and small, and says so itself, presenting a tight team as a short-circuit advantage.
Three things deserve a buyer's own verification. The site contradicts itself on transfers outside Europe, on the deployment lead time and on the city of its head office. The ISO 27001 and HDS claims come with no certificate or number, and HDS is held by the host OVHcloud, not by In Astra. And the publisher's incorporation date cannot be established reliably, the available sources disagreeing with one another, which is why this record leaves it unset.
- Choosing a selection results in a full page refresh.
- Opens in a new window.