Clarity before Complexity.
Guides and insights for decision-makers: AI regulation, knowledge management, and sovereign IT operations. Written for clarity, designed for practice.
EU AI Act fully in force: What now becomes a priority for executives
Since August 2, 2026, the regulation has been fully applicable, including high-risk obligations and the full framework for fines. Why management must act now.
7 min read · Aug 4, 2026 guide · security & liabilityNIS2 & Executive Liability: Cybersecurity is now personal
Around 30,000 companies are affected, and management is personally liable. Who falls under NIS2, which obligations apply, and how to get started pragmatically.
6 min read · Aug 4, 2026 guide · knowledge managementFrom document chaos to corporate memory
Knowledge AI with RAG explained simply: Why this approach differs from public chatbots and the concrete benefits it brings to your company.
5 min read · Jul 28, 2026 guide · complianceSchatten-KI: Wenn Mitarbeitende ChatGPT nutzen – und niemand es weiß
Uncontrolled AI usage is the largest undiscovered data risk for medium-sized businesses. How to channel usage into structured paths without killing productivity.
5 min read · Jul 28, 2026 guide · AI infrastructureWhat does AI on your own infrastructure really mean?
Three levels determine whether 'sovereign' is accurate: where the model runs, who sees the data, and who controls the permissions. Including a cost analysis.
6 min read · Aug 13, 2026 guide · cloud & securityMicrosoft 365 ist nicht automatisch sicher: Die sieben Stellschrauben
Microsoft secures the platform — identities, configuration, and data remain your responsibility. The seven settings that matter.
7 min read · Aug 13, 2026 Guide · Data BackupEin Backup ist kein Backup-Konzept: Wiederherstellung nach Ransomware
Why backups fail in emergency situations, what the 3-2-1-1-0 rule means, and why immutability is the critical factor.
6 min read · Aug 13, 2026 Operations GuidePatchmanagement: Die unterschätzte Pflicht zwischen Alltag und Angriff
Most attacks exploit vulnerabilities that have long been patched. What a resilient patching process looks like — and why NIS2 makes it a requirement for compliance.
5 min read · Aug 13, 2026 guide · securityAudio-Deepfakes & Voice-Phishing: Wenn die Stimme am Telefon lügt
Voice clones deceive humans and systems. How the attacks work, what the EU AI Act requires, and how to recognize effective protection.
7 min read · Aug 13, 2026The situation
in figures.
What decision-makers need to know right now — concise, evidence-based, without alarmism.
or 7% of the annual turnover
Fine framework of the EU AI Act for violations of prohibited AI practices. For SMEs, the lower thresholds apply in each case — yet they remain in the double-digit millions.
Regulation (EU) 2024/1689, Art. 99Companies subject to NIS2 in Germany
The NIS2 transposition act significantly extends obligations beyond classic KRITIS. New: Management is personally liable for the implementation of security measures.
NIS2 Directive (EU) 2022/2555Working time is wasted on searching.
Studies show that knowledge workers spend around a fifth of their week searching for internal information or asking colleagues for help. This is exactly where a knowledge AI comes into play.
McKinsey Global Institutedid the EU AI Act apply in full
As of this date, the high-risk obligations and the full penalty framework also apply. System registries, role assignments, and AI Literacy evidence should now be available in documented form.
Regulation (EU) 2024/1689, Art. 113Regulation reads like a threat.
We translate them into work orders.