Insights from people who build
Guides and articles on the AI Act, costs, European AI and where to start. Written by the founders, updated when the rules or the market change.
Start here
New to AI in your organisation? This guide takes you through five steps, from the first process to a team that works with it.
Compliance and security
What the AI Act, the GDPR and information security ask of you, and how you arrange it. With the template for your AI policy.
-
The AI Act: what does your organisation need to arrange?
Does the EU AI Act apply to your organisation, what applies now and what is still to come? The risk classes, the timeline after the Digital Omnibus and four steps to get compliant. Updated October 2026.
Read more -
AI and the GDPR: what to arrange before you use personal data
When the GDPR applies to AI, what you need to arrange (legal basis, data minimisation, data processing agreement, DPIA), where the data may be stored and how the GDPR and the AI Act work side by side.
Read more -
AI literacy: what Article 4 asks of your organisation
What AI literacy under Article 4 of the EU AI Act means, who it applies to, what changed with the Digital Omnibus and how you show that you have it covered.
Read more -
Writing an AI policy: what goes in and how to start
An AI policy sets out which AI tools are allowed, which data may go into them and who is responsible. The fixed sections, a step‑by‑step plan and what often goes wrong, with a template.
Read more -
AI and information security: the risks and what to do about them
Which security risks does AI bring, such as data leaks through prompts and prompt injection, and how do they fit into ISO 27001 and NIS2? The measure for each risk.
Read more -
Human oversight and logging: what the AI Act asks and how to build it
What human oversight and logging mean under the EU AI Act, when they are mandatory, which design patterns work and how long to keep logs. With the Medux AI voice as an example.
Read more -
ISO 42001: what it is and whether you need it
ISO/IEC 42001 is the international standard for an AI management system. What the standard asks, who certification makes sense for, how it relates to the EU AI Act and ISO 27001, and what a certification project looks like.
Read more
Cost and approach
Where you start, what it costs and how you know whether it pays off before you build.
Self‑hosted AI and Europe
Which European AI tools exist, and when to run AI on your own servers or in a European cloud.
Training
Teaching your team to work with AI, and meeting Article 4 of the AI Act.
Overviews
Comparisons we update every six months.
New and updated
- The AI Act: what does your organisation need to arrange?
- AI and the GDPR: what to arrange before you use personal data
- AI literacy: what Article 4 asks of your organisation
- Writing an AI policy: what goes in and how to start
- AI and information security: the risks and what to do about them
- Human oversight and logging: what the AI Act asks and how to build it
Prefer to talk?
Have a concrete process or system? In a six‑day start sprint you find out whether it works, what it costs and what it looks like.