Blog
Practical knowledge on EU-sovereign AI, data protection and company knowledge — without the marketing fog.
· 3 min read
The CLOUD Act and AI: why server location alone is not enough
Many US cloud providers advertise EU data centers. For AI projects handling sensitive company data, that falls short — what matters is whose law governs the provider.
CLOUD Act · GDPR · EU sovereignty
· 3 min read
Rolling out AI GDPR-compliantly: the 7-point checklist for companies
From shadow AI to a clean setup: seven points companies should clarify before rolling out an AI platform — from the DPA and subprocessors to the deletion concept.
GDPR · Compliance · AI rollout
· 3 min read
Introducing AI with the works council: avoiding the surveillance debate
Why the works council has a say in AI tools, which questions are guaranteed to come up — and how the right architecture answers the trust question before it escalates.
Works council · Co-determination · Data protection
· 3 min read
An OpenAI-compatible API from the EU: build AI apps without US clouds
How development teams build AI features on EU-hosted models: what API compatibility means in practice, where it pays off — and how costs stay under control.
API · Developers · EU sovereignty
· 2 min read
When vector search is not enough: company knowledge as a knowledge graph
RAG with vector search answers factual questions from documents. It fails systematically on questions about relationships and structure — those need a company graph.
Knowledge Graph · RAG · Company knowledge