Sovereign, hybrid, cloud: where your images go, in one table

“Where do the images go?” is the second question of any project, right after “Will the works council accept it?”. It comes from IT, from the insurer, sometimes from the group. We answer it with a table rather than a promise, because the answer depends on a choice that is yours to make.

Three editions, one difference

Camly comes in three editions. Tasks, episodes, alerts, reports and the queryable history are identical in all three. What changes is where the server runs and where the images are analysed.¹

	Cloud	Hybrid	Sovereign
Where the server runs	Hosted in Europe: AWS (EU region), Scaleway (France) or your company’s own cloud	On your site, on a mini-server without GPU	On your site, on a server with GPU
Where images are analysed	In the cloud	By a cloud model, with the site’s own key and a monthly budget	By a local model, on site
What leaves the site	The checked images and the findings	The checked images, to the model provider chosen by the site	Nothing
Who holds the model key	Camly	The site	Nobody: there is none
GPU needed	No	No	Yes
Who it suits	Sites without a technical room, quick starts, groups already on a European cloud	Sites that want the data at home without investing in a GPU	Seveso sites, groups with a strict data policy, areas without a reliable connection

In all three cases, people are blurred by default on stored images, findings are about zones and never about persons, and the client remains the data controller with Camly as processor.¹

Why the choice belongs to IT and the works council, not to us

We could have offered a single edition. Many vendors do, and it is almost always the cloud, because it is the easiest to operate. We did the opposite for a precise reason: the hosting question is the one an HSE manager cannot settle alone. It involves IT, who answers for network security, and the works council, which legitimately asks where the warehouse images are sent.

A tool that imposes its hosting also imposes the answer given to those two parties. A tool that leaves the choice lets them pick the answer they can defend. That is often the difference between a project that starts in three weeks and one that waits six months for a committee.

What is identical across editions

It is worth saying explicitly, because the question keeps coming back: choosing the sovereign edition does not mean choosing a reduced version.

• The same tasks, written in plain language: “emergency exit B is clear”, “no combustibles in the charging area”.
• The same episodes, with a start, an end and a duration, and the same evidence image with the time, the camera and the zone.
• The same reports: the near-miss report ready for the risk assessment document, the works council and the insurer.
• The same queryable history, with the same questions refused by design.
• The same periodic checks, and therefore the same limits: Camly is neither a fire detection system nor a real-time interception tool.

What can differ is the analysis model used: the local model of the sovereign edition is not the cloud model of the hybrid edition. We measure both on the same test sets and publish the differences when there are any.

A decision guide in four questions

1. Can the site’s images leave the site? If the answer is no, by group policy or by the site’s classification, the sovereign edition is the only candidate. The question is settled.
2. Is there a technical room and someone to install a server in it? If not, the cloud edition starts fastest. If so, the hybrid edition is the most common compromise: the data at home, the analysis by a provider you choose, with your own key and a capped monthly budget.
3. Who has to answer “where are the images?” in front of the works council? The table above is meant to be attached to the works council file as is.
4. What happens at the end? At the end of a pilot the data are exported or erased, the site’s choice. That clause is the same in all three editions.¹

Where to start

Send this table to your IT department before calling us. If one column is ruled out from the start, the rest of the conversation will be short; if all three remain possible, the thirty-day pilot runs on the edition the site prefers, and it can change afterwards.

Sources

1. Camly AI, “Camly for warehouses” brochure, pilot edition, October 2026, pages “Privacy and sovereignty” and “The pilot”.