PloneConf 2026 · Omnia

The stack behind it

Plone never calls a model.

00 · It calls apims-omnia-core, our own FastAPI service.

Omnia · PloneConf 2026

Keycloak

01 · Every call is authenticated.

Omnia · PloneConf 2026

And every call is attributed

  • A service, not an add-on

  • Four hundred + local authorities

  • One identity per caller

  • We know who uses what

  • And what it costs

Omnia · PloneConf 2026
Omnia · PloneConf 2026

On our own Kubernetes cluster.

Omnia · PloneConf 2026

Our clusters. Not someone's platform.

Omnia · PloneConf 2026

On bare metal, in France.

Omnia · PloneConf 2026

With a French model.

Omnia · PloneConf 2026

What we send — and what we don't

✅ The Mistral call

  • Only the text the editor selected
  • Nothing else, on every single call
  • No training on our data
  • No retention

❌ Never sent

  • Citizen records
  • Database content
  • Documents the editor did not select
  • Anything from the other applications
Omnia · PloneConf 2026

Not a promise. A network policy.

Omnia · PloneConf 2026