Blog
Posts on local AI, privacy, GDPR and the EU AI Act, architecture and retrieval — grounded, with sources.
RSS feed-
Source citations as a privacy property, not just a UX feature
Why answers with source citations reveal less about the model than plain model answers — privacy and verifiability are two sides of the same property.
Read more → -
GDPR and the LLM: pasting documents into ChatGPT is a data-export event
What happens legally when client files or research drafts get pasted into a cloud LLM — third-country transfer (Arts. 44–49 GDPR), lawful basis, and processor/controller in a practical reading.
Read more → -
On-device AI under the EU AI Act
Where locally running AI systems sit in the EU AI Act — a reading of Articles 6, 50, and 95. With role logic and practice notes for DACH law firms and research groups.
Read more → -
A taxonomy of "local AI": inference, retrieval, training
What can be "local" about an AI — three pipeline stages, three times the question "where does this actually run?". A reference piece for the rest of the series.
Read more → -
What "private" actually means for an AI assistant
A checklist of five testable properties — how to measure whether an AI tool is genuinely private. With GDPR and EU AI Act references.
Read more →