Collection

AI governance and regulation

Security, policy, compliance and operating controls for responsible AI adoption.

Blog posts
22
Topic
Business and regulation

Start here

Latest in this collection

A checkmark inside two shield outlines Business & Regulation

Odoo AI data residency: does EU hosting cover inference?

A database region does not settle the AI data path. Review the feature, context and processing evidence with a downloadable checklist and synthetic inspection record.

Kevin Riedl
Read
Layered harness frames around a fixed model, illustrating recursive improvement rather than model retraining Business & Regulation

Google Harness²: Setup, Benchmarks and the Real Cost

Better agent results without retraining the model? Read what Google Harness² changes, what its benchmarks prove, and why a safe pilot needs a cost and acceptance boundary.

Kevin Riedl
Read
Stacked computing layers illustrating a model distributed across devices Business & Regulation

Anthropic’s self-replicating AI warning: the local AI takeaway

A security warning with an unexpected local-AI lesson. Separate the three experiments, check the speed arithmetic and make ownership testable.

Kevin Riedl
Read
CRA incident timeline with 24-hour, 72-hour, and final-report checkpoints Business & Regulation

Cyber Resilience Act Reporting: The 24/72-Hour Operational Playbook

Operational CRA reporting: 24/72-hour deadlines, distinct final reports for exploited vulnerabilities and severe incidents, ownership and submission evidence.

Kevin Riedl
Read
Software evidence chain linking requirements, tests, releases, incidents, and updates Business & Regulation

EU Product Liability for Software: Evidence Checklist

Build the release, test, incident, and update evidence chain needed for software placed on the EU market after 8 December 2026.

Kevin Riedl
Read
AI bill of materials comparing CycloneDX and SPDX for models, datasets, and software Business & Regulation

AI Bill of Materials: CycloneDX vs SPDX

Choose an AIBOM format, define model and dataset provenance, and generate signed inventory from the release pipeline.

Kevin Riedl
Read

Complete article directory

  1. Odoo AI data residency: does EU hosting cover inference?
  2. Google Harness²: Setup, Benchmarks and the Real Cost
  3. Anthropic’s self-replicating AI warning: the local AI takeaway
  4. Cyber Resilience Act Reporting: The 24/72-Hour Operational Playbook
  5. EU Product Liability for Software: Evidence Checklist
  6. AI Bill of Materials: CycloneDX vs SPDX
  7. LLM Pseudonymization Gateways: Does the Prompt Leave GDPR Scope?
  8. Semantica Review 2026: Can It Explain Every AI Agent Decision?
  9. AI Agent Contract Signing: eIDAS QES Integration Guide
  10. Terafab: Who Controls the AI Stack From Silicon to Orbit?
  11. Can AI Create Viruses? What Stanford Actually Proved
  12. PII Redaction Before LLM Prompts: A Practical Pipeline
  13. Stripe Billing and E-Invoicing 2027
  14. EU AI Act Article 50 Checklist for SaaS and AI Agents
  15. AI Agent SLA Template: Accuracy, Latency, Human Handoff and Auditability
  16. EU AI Vendor Security Questionnaire: 45 Questions Before You Sign
  17. DACH AI Adoption Benchmark 2026: What SMEs Put Into Production
  18. EU Data Residency for AI APIs in 2026: Provider Guide
  19. The One-Page AI Policy for a DACH Company
  20. EU AI Act Cost for a Startup: Scope Before Budget
  21. MiCA + FMA Reality Austria 2026
  22. GDPR + EU AI Act for DACH SaaS
Inbox, without the noise

Get the next Business and regulation field note

One concise email when we publish. No tracking pixels, and no inbox filler.