← All news
NEWS

COMPLIANCE

NIS2, DORA, GDPR and the rest of the regulatory landscape — what changes and what it means in practice.

What to check when an AI vendor embeds an outside safety evaluator
COMPLIANCE 22 Sept 2026 4 min read

What to check when an AI vendor embeds an outside safety evaluator

When an AI vendor gives an outside evaluator employee-level access, ask for a data-flow map and check who funds the evaluator. Anthropic and Accenture's September 2026 deal is the case that raised the question.

EU AI Act vs the US AI executive order: a buyer's timeline
COMPLIANCE 22 Sept 2026 4 min read

EU AI Act vs the US AI executive order: a buyer's timeline

The EU AI Act and the US AI executive order run on different clocks and cover different things. This guide shows what already applies, what changed, and how to check a vendor's claim.

MSP FAQ: what OpenAI's new misalignment disclosures mean for vendor risk
COMPLIANCE 22 Sept 2026 2 min read

MSP FAQ: what OpenAI's new misalignment disclosures mean for vendor risk

OpenAI published six cases of concerning model behavior under a new voluntary disclosure framework on 16 September 2026 — a diligence signal, not a compliance substitute.

Why 'is AI regulated yet' is the wrong question for EU buyers
COMPLIANCE 22 Sept 2026 2 min read

Why 'is AI regulated yet' is the wrong question for EU buyers

EU AI rules, US executive orders and procurement requirements run on different clocks. Flattening them into one verdict either freezes a lawful project or ships a claim that won't hold up.

What Italian public buyers actually screen for in cloud procurement
COMPLIANCE 22 Sept 2026 2 min read

What Italian public buyers actually screen for in cloud procurement

Behind 'sovereignty' slogans, Italian central-administration cloud tenders like Consip's AQ 2860 lean on concrete bars: ACN qualification levels, EU/EEA data location, and contractual exit terms.