Title: Insights: guides on building AI, costs and the EU AI Act | AI Heroes URL: https://aiheroes.io/en/insights Description: Guides and articles from people who build AI themselves: the EU AI Act, AI literacy, the GDPR and security, costs, European alternatives and where to start. # Insights from people who build Guides and articles on the AI Act, costs, European AI and where to start. Written by the founders, updated when the rules or the market change. Start with the guide ## Start here New to AI in your organisation? This guide takes you through five steps, from the first process to a team that works with it. - [Where do you start with AI in your organisation? Five steps](https://aiheroes.io/en/insights/where-to-start-with-ai) · Start with one process that costs time or money, before any AI strategy. A guide in five steps: find the problem, an owner, the numbers, test small and roll out. · Read the guide ## Compliance and security What the AI Act, the GDPR and information security ask of you, and how you arrange it. With the template for your AI policy. - Article · 4 min · David Homan · [The AI Act: what does your organisation need to arrange?](https://aiheroes.io/en/insights/ai-act) · Does the EU AI Act apply to your organisation, what applies now and what is still to come? The risk classes, the timeline after the Digital Omnibus and four steps to get compliant. Updated October 2026. · Read more - Article · 3 min · David Homan · [AI and the GDPR: what to arrange before you use personal data](https://aiheroes.io/en/insights/ai-and-gdpr) · When the GDPR applies to AI, what you need to arrange (legal basis, data minimisation, data processing agreement, DPIA), where the data may be stored and how the GDPR and the AI Act work side by side. · Read more - Article · 3 min · Jan Brusse · [AI literacy: what Article 4 asks of your organisation](https://aiheroes.io/en/insights/ai-literacy) · What AI literacy under Article 4 of the EU AI Act means, who it applies to, what changed with the Digital Omnibus and how you show that you have it covered. · Read more - Article · 3 min · David Homan · [Writing an AI policy: what goes in and how to start](https://aiheroes.io/en/insights/ai-policy) · An AI policy sets out which AI tools are allowed, which data may go into them and who is responsible. The fixed sections, a step-by-step plan and what often goes wrong, with a template. · Read more - Article · 3 min · David Homan · [AI and information security: the risks and what to do about them](https://aiheroes.io/en/insights/ai-security) · Which security risks does AI bring, such as data leaks through prompts and prompt injection, and how do they fit into ISO 27001 and NIS2? The measure for each risk. · Read more - Article · 3 min · David Homan · [Human oversight and logging: what the AI Act asks and how to build it](https://aiheroes.io/en/insights/human-oversight) · What human oversight and logging mean under the EU AI Act, when they are mandatory, which design patterns work and how long to keep logs. With the Medux AI voice as an example. · Read more - Article · 3 min · David Homan · [ISO 42001: what it is and whether you need it](https://aiheroes.io/en/insights/iso-42001) · ISO/IEC 42001 is the international standard for an AI management system. What the standard asks, who certification makes sense for, how it relates to the EU AI Act and ISO 27001, and what a certification project looks like. · Read more Further reading [Compliance and security](https://aiheroes.io/en/compliance) [The AI Act check](https://aiheroes.io/en/compliance) ## Cost and approach Where you start, what it costs and how you know whether it pays off before you build. - Guide · 4 min · Frans Hoorn · [Where do you start with AI in your organisation? Five steps](https://aiheroes.io/en/insights/where-to-start-with-ai) · Start with one process that costs time or money, before any AI strategy. A guide in five steps: find the problem, an owner, the numbers, test small and roll out. · Read more Further reading [AI implementation costs](https://aiheroes.io/en/ai-implementation-costs) [Cost and return up front](https://aiheroes.io/en/business-case) [The start sprint](https://aiheroes.io/en/start-sprint) ## Self-hosted AI and Europe Which European AI tools exist, and when to run AI on your own servers or in a European cloud. - Overview · 4 min · Frans Hoorn · [European alternatives to ChatGPT (2026): the options side by side](https://aiheroes.io/en/insights/european-chatgpt-alternatives) · Which European alternatives to ChatGPT exist for business use: assistants, open models in a European cloud and models on your own servers. With a guide to choosing. Checked in October 2026. · Read more Further reading [AI on your own servers](https://aiheroes.io/en/ai-on-your-own-servers) [European alternative to ChatGPT](https://aiheroes.io/en/european-chatgpt-alternative) [Self-hosted AI](https://aiheroes.io/en/self-hosted) ## Training Teaching your team to work with AI, and meeting Article 4 of the AI Act. - Article · 3 min · Jan Brusse · [AI literacy: what Article 4 asks of your organisation](https://aiheroes.io/en/insights/ai-literacy) · What AI literacy under Article 4 of the EU AI Act means, who it applies to, what changed with the Digital Omnibus and how you show that you have it covered. · Read more Further reading [AI training for your team](https://aiheroes.io/en/training) [In-company AI training](https://aiheroes.io/en/incompany-ai-training) [AI literacy training](https://aiheroes.io/en/ai-literacy-training) [Digital sovereignty](https://aiheroes.io/en/digital-sovereignty) ## Overviews Comparisons we update every six months. - Overview · 4 min · Frans Hoorn · [AI agencies in the Netherlands compared (2026)](https://aiheroes.io/en/insights/top-10-ai-agencies) · Ten AI agencies in the Netherlands side by side, with what each is strong in and who it suits. With the criteria, a comparison table and a guide to choosing. Checked in October 2026. · Read more Further reading [AI agency Netherlands](https://aiheroes.io/en/ai-agency-netherlands) [AI agency Groningen](https://aiheroes.io/en/ai-agency-groningen) ## New and updated 1. [The AI Act: what does your organisation need to arrange? David Homan · updated 12 October 2026 · 4 min](https://aiheroes.io/en/insights/ai-act) 2. [AI and the GDPR: what to arrange before you use personal data David Homan · updated 12 October 2026 · 3 min](https://aiheroes.io/en/insights/ai-and-gdpr) 3. [AI literacy: what Article 4 asks of your organisation Jan Brusse · updated 12 October 2026 · 3 min](https://aiheroes.io/en/insights/ai-literacy) 4. [Writing an AI policy: what goes in and how to start David Homan · updated 12 October 2026 · 3 min](https://aiheroes.io/en/insights/ai-policy) 5. [AI and information security: the risks and what to do about them David Homan · updated 12 October 2026 · 3 min](https://aiheroes.io/en/insights/ai-security) 6. [Human oversight and logging: what the AI Act asks and how to build it David Homan · updated 12 October 2026 · 3 min](https://aiheroes.io/en/insights/human-oversight) ## Prefer to talk? Have a concrete process or system? In a six-day start sprint you find out whether it works, what it costs and what it looks like. [Plan a start sprint](https://aiheroes.io/en/start-sprint) [Book an introduction](https://aiheroes.io/en/about/team)