Compliance
The ERP Clause Nobody Reads Decides the Ten-Year Cost
An ERP system's ten-year cost is set by five contract clauses, not the software you pick. The Diageo case, the EU Data Act and the pre-signature checklist.
The Autonomy Gap: Vendors Sell Autonomous, Operations Deliver Partial
Vendors sell the autonomous enterprise; operations deliver partial automation. Gartner, DSAG and the Lemvigh-Müller case show the real maturity gap.
AI Tokenomics: Why Your AI Budget Has No Ceiling Anymore
Microsoft Copilot Cowork bills by usage since 16 June 2026. Why the Mittelstand budgets AI by the seat but pays by the token, and how to cap the open line.
Your AI Agent Has No Permission Profile. It Has Your Intern's.
AI agents inherit the full rights of whoever starts them. Why least privilege belongs before go-live: four steps to access governance for the Mittelstand.
When the AI Subscription Becomes a Bet: A Procurement Lesson
The Anthropic lawsuit shows an AI subscription with an opaque usage limit is a bet, not a cost model. Three steps every Mittelstand LLM rollout needs.
Data Act Access by Design: The ERP Question Hiding Behind the IoT Label
From 12 September 2026 the Data Act requires access by design. Why Article 3 is an ERP and backend question, not a job for the machine control.
Fable 5's 14-day window: how to budget AI when the vendor moves the price
Fable 5 is included in Claude plans until June 22, then moves to Usage Credits at double the Opus 4.8 rate. How to budget AI before the June 23 cut-off.
The Inference Gap: Why the 'AI Bank' Collides with CJEU C-184/20
Aggregated bank data lets AI infer Article 9 categories (CJEU C-184/20). Why sensitive inferences belong before model training, not in a downstream audit.
ChatGPT Finances: The Architecture Question Before the Trust Question
OpenAI ships ChatGPT Personal Finance with Plaid. Why aggregated bank data triggers Article 9 GDPR and four questions Mittelstand companies need to ask now.
Germany's E-Invoice 2027: the 12-point readiness check for the Mittelstand
From 01.01.2027 German B2B sellers above 800k euro must issue structured e-invoices. The 12-point self-check plus a pilot calendar May to December 2026.
WhatsApp Lawsuit Against Meta: What It Means for Businesses
Class action against Meta: WhatsApp messages intercepted despite encryption. GDPR risks for mid-sized companies and an overview of secure alternatives.
When AI Agents Hack AI Systems: Why Your AI Needs Security Testing Now
Autonomous AI agents hacked McKinsey's platform, CVSS 9.8. What this means for your AI systems and which testing standards now apply. Read now.
DATEV ERP: Why You Should Never Change Cost Centers Mid-Year
Restructuring cost centers mid-year leads to inconsistent reports, wrong P&L statements, and audit issues in DATEV. How to do it right.
One Year of Mandatory E-Invoicing: Why the B2B Standard Is Drowning in ZUGFeRD Chaos
One year of mandatory e-invoicing: broken workarounds, malformed XML, and ERP systems misreading ZUGFeRD. An unvarnished progress report. Read now.
Shadow AI: When Employees Secretly Build Their Own AI Agents
Employees build their own AI workflows and feed company data into uncontrolled systems. How to stop Shadow AI without killing innovation. Read now.
Helsing, AI Weapons, and the Illusion of Human in the Loop
Helsing builds AI drones for European defense. A human is supposed to make the final call. What happens when AI exploits the human? Analysis.
AI Agents and the EU AI Act 2026: What SMEs Need to Know Now
The EU AI Act takes full effect in August 2026. Companies using AI need compliance. How AI agents bridge regulation and efficiency. Practical analysis.
E-Invoicing 2025: What SMEs Need to Know Now
E-invoicing mandatory since 2025 for B2B in Germany. Which formats qualify, which deadlines apply, and where the typical pitfalls are. Practical analysis.
Questions about Compliance?
Let's discuss what works best for your situation in a short conversation.
Book a call