Is It Safe for Notaries in France to Use AI?

The answer fits in one line. AI can help you draft or summarise, but never hand it your deed data. A party's identity. An estate amount. A family situation. Pasted into a consumer AI, these details leave your office. That is exposure to a third party. Yet a notary is a public officer, bound by general and absolute professional secrecy. And under the GDPR, you remain the data controller for your clients' data. There is a clean method: anonymise before any prompt, then restore the values locally.

The problem: deed data pasted into AI

The habit spreads fast in offices. You ask an AI to summarise an estate file. You have it rewrite a marriage-contract clause. You submit the draft of a gift deed. To save time, you paste the raw text. That text often holds the parties' real data. This is where the risk begins, not in the tool itself.

A notarial deed concentrates some of the most sensitive data there is. Here is what a poorly prepared prompt can expose.

• The identity and contact details of the parties, and of third parties named.
• The assets: real estate, accounts, amounts, estate values.
• The family situation: marital regime, filiation, gifts, heirs.
• The deed references and the documents attached to the file.

The stake: public officer, secrecy and the GDPR

A notary is not an ordinary provider. It is a public and ministerial officer, holding delegated public authority. The notary authenticates deeds, collects the parties' consent and keeps the originals. On that basis, the notary is bound by professional secrecy. This secrecy is described as general and absolute. Everything the notary learns on duty is covered by it. The office staff is bound too.

The sanction is not theoretical. Article 226-13 of the Criminal Code punishes disclosing secret information by a person entrusted with it. The penalty runs up to one year in prison and a 15,000-euro fine. The status itself is old and solid. It is set by Ordinance No. 45-2590 of 2 November 1945 on the status of the notarial profession.

Now a consumer AI provider is an unauthorised third party. Secrecy binds the notary and the staff, not an outside service. So pasting deed data into an AI means exposing secret-covered information to that third party. The content can be retained, reviewed or reused to train the model. Exposure alone is enough to be a problem, even without a public leak.

The GDPR adds to the secrecy duty. The notary is the data controller for clients' data. The CNIL, France's data protection authority, states that AI gets no exemption. As soon as an AI system processes personal data, the regulation applies fully. That covers training, the query and the output. Legal basis, minimisation, security, transparency: nothing is set aside.

Is AI banned for the notarial profession?

No. No rule forbids a notary from using AI. The tool can structure an argument, rewrite a clause or suggest an outline. What causes trouble is exposing the data, not using AI itself. So the question is not “should we give up AI?”. The question is “how do we use it without exposing deed data?”. The answer holds in one word: minimisation.

The fix: anonymise before the prompt

The fix matches what the CNIL says. When personal data is not needed for the processing, you strip it upstream. This is minimisation applied to AI. The notary keeps the tool and saves time. The AI never sees the deed's real values. You stay in control of the secret, on your own machine.

In practice, you proceed step by step. You spot each identifying element. You replace it with a token before sending. The AI reasons about the shape of the file, without ever reading identities or amounts. You then restore the real values, locally. Here is the order to follow.

1. 1Spot the deed data: identities, assets, family situation, references.
2. 2Replace them with reversible tokens, in the browser.
3. 3Send only the anonymized text to the AI.
4. 4Restore the real values in the reply, locally, then re-read the result.

That's what ONYRI Sanitize is for. The engine detects sensitive data — identities, contact details, amounts, references — and replaces it with reversible tokens before sending. Detection and the mapping stay in your browser. Only anonymized text reaches the model. The AI finds only tokens, never your deed data. You get AI's help, while reducing the exposure that professional secrecy and the GDPR ask you to control.