Review-Gated Agentic Workflow. How We Use AI Agents
A practical operating model for software teams that want AI agents to implement changes while people retain approval, review, merge, and deployment.
Topic
Security and regulation
NIS2 and the AI Act turn security into work for whoever runs the servers. We cover evidence and ownership before software goes live.
Software vendor due diligence for security and ownership
A buyer checklist for security, integrations, data roles, ownership, support, and exit planning before signing a software contract.
Chinese vs American AI Models: Should Your Business Use Them?
Model origin is only part of the decision. Compare hosted APIs and self-hosting through data access, service terms and the cost of a completed business task.
AI Act 2026 Checklist for Chatbots, HR Tools, and Internal AI Workflows
The AI Act is not only a legal topic. Companies need an inventory of AI tools, owners, data, risks, logs, human review, and vendor responsibilities.
NIS2 for developers: Security baseline for SaaS, ERP and HR systems
Your enterprise clients will start sending NIS2 compliance questionnaires. Here's what software companies need to know about security baselines, incident response, and supply chain obligations.
Instant payments in the EU: What changes for payment matching and cash flow
Instant transfers and automatic matching solve different problems. Check the timeline for your bank, verification of payee outcomes and the rules in your ERP.
Your AI hiring tool might be high-risk under the AI Act. Here's what that means.
AI Act transparency rules apply from August 2, 2026. High-risk employment AI rules apply from December 2, 2027. Practical preparation guide.
Pay Transparency. Slovak Rules and Preparing HR Data
Slovak Act 76/2026 is in force and the first report has a transitional period. Separate domestic rules from the Directive and prepare traceable HR data.
ViDA is here. What changes for your invoices, ERP and accounting
The EU adopted the VAT in the Digital Age package. From April 2025, member states can mandate e-invoicing. Here's what it means for your systems.
QR Sticker Phishing. Verify the Request Before Paying
MIRRI flagged fake government sites and QR stickers on cars. Verify requests through a separate channel and give employees a clear reporting route.
Your website may be compromised without going down
A site can remain available while an external script leaks visitor data. How to inspect loaded resources and what Cloudflare monitoring covers.
GitHub Actions in 2026. Lockfiles and safer runs
Workflow lockfiles are in public preview. How to separate available controls from roadmap promises and review dependencies, credentials and outbound access.
AI CyberLab: What's Realistic About AI in Cyber Defense Today
The AI CyberLab proposal does not establish detection performance. Where to test AI in cyber defense and how to assess a pilot before deployment.
AI Phishing and Deepfakes. Verify the Sensitive Request
Correct language and a familiar voice do not establish identity. Verify bank-detail changes through a known contact and rehearse the team response.
DORA for IT Suppliers. Prepare Evidence for Your Customer
A financial customer needs evidence that its ICT service is managed. What to agree in the contract and how to test recovery and incident communication.
Google's Private AI Compute: Balancing Power and Privacy
Google describes protected cloud processing for selected Pixel features. See what the architecture protects and what the announcement does not establish for business data.