Insights archive
Earlier publications. Page 2 of 3.
From recent publications to earlier guides.
Page 2 of 334 articles
AI and the AI Act
Article 50 does not impose one label on every AI output. Match interaction notices, machine-readable marking and publication disclosures to the function, role and use case.
AI and the AI Act
Article 4 calls for measures that support AI literacy in the actual work people do. Build a programme around roles, systems and risk, rather than collect identical certificates.
GDPR and InfoSec
A licence, DPA and EU data region do not complete an AI procurement review. Map the data, check the vendor's roles and agree how the service changes, incidents and exit will work.
GDPR and InfoSec
No model training by default is only one part of the assessment. Trace source access, data sent to connected providers, permissions, retention and the contracts behind an app.
Cybersecurity
The CRA brings vulnerability handling and security maintenance into the product lifecycle. For software businesses, that also changes how support, supplier responsibilities and the end of maintenance should be agreed.
Cybersecurity
CRA reporting started on 11 September 2026. Identify the manufacturer, assess the reporting trigger and organise the 24-hour warning, 72-hour notification and final report through ENISA's platform.
Startups
Equal ownership can reflect equal contribution. The difficulty starts when every decision needs both founders and there is no escalation process or workable way out of a lasting impasse.
Startups
A departing founder may stay in the same sector without competing with the product. Define the activity, duration and relationships you need to protect before writing the restriction.
Startups
A vesting schedule can protect the cap table when a founder leaves early. It also needs a workable transfer mechanism, price and leaver rules that fit the company structure and governing law.
Cybersecurity
A Polish customer asks for two-hour incident alerts, supplier audits and full KSC compliance. Separate statutory duties from contractual requests, and allocate work to the service each party controls.
SaaS and platforms
Poland's consumer authority challenged Bolt's change and liability clauses. Review app terms against failures, billing and complaints, rather than assume every risk can pass to the user.
Startups
An investor needs protection on major decisions; founders still need to run the business. Define the consent list, thresholds and process, then check how it works in the company's legal documents.
