Resources
Practical know-how on the GDPR, the AI Act and data governance. No jargon, just specifics - so you can turn it into a checklist, not just a note.
Does my company fall under the KSC/NIS2 Act? Qualification test and what to do after the registration deadline
Sector plus size counted with your corporate group, essential vs. important entity, S46 registration and the deadlines through 2028. With a 10-question checklist.
Read the article →Art. 4 of the AI Act after the Digital Omnibus: the AI literacy obligation changed in nature
From "ensuring" competence to "supporting its development". What that means in practice, whether penalties apply, and how to document due diligence.
Read the article →The AI Act: timeline and obligations for companies - what applies in 2026 and what comes after the Digital Omnibus (2027-2028)
Regulation 2024/1689 applies in stages, and the Digital Omnibus pushed high-risk systems back to December 2027. See which obligations already apply to you and which ones you still have time for.
Read the article →External or in-house DPO? Costs, the requirements of Articles 37-39 GDPR and when a designation is mandatory
Not every company has to have a data protection officer - but many should. We compare both models: costs, risks and formal requirements.
Read the article →DPIA step by step - when it is mandatory and how to carry it out (Article 35 GDPR + the list of the Polish data protection authority, UODO)
A data protection impact assessment is not a two-page formality. We show when a DPIA is mandatory and how to do it in 7 steps.
Read the article →A GDPR checklist for startups - 12 points before you launch your product
Legal bases, the record of processing activities, data processing agreements, the breach procedure. Twelve things you had better sort out before launch rather than after the first complaint.
Read the article →Shadow AI in your company: employees are using ChatGPT - what to do about it legally
Banning it does not work, ignoring it costs money. How to bring order to bottom-up AI use: the GDPR, trade secrets and the AI literacy obligation.
Read the article →AI Act Check - check your AI system
An interactive quiz: answer a few questions and see which AI Act risk category your system may fall into and what obligations come with it.
Launch the tool →Legal Stack Configurator - match a package to your company
Five switches about your organisation and a ready recommendation: DPO as a Service, Startup Legal Stack, AI Readiness Sprint - with prices, as an API response.
Launch the tool →Exposure calculator - the GDPR and the AI Act
Enter your annual turnover and see the maximum statutory fine ranges under Article 83 GDPR and Article 99 of the AI Act, set against the annual cost of an external DPO.
Launch the tool →Regulatory radar - the AI Act, the GDPR, KSC/NIS2 (Poland's cybersecurity act), pay transparency, DORA
A timeline with countdowns to the nearest deadlines and status lights for the five regimes that affect technology companies.
Open the radar →C-Level Guide: the AI Act and the GDPR for business leaders
A free guide for boards: roles and risk buckets, the timeline after the Digital Omnibus, obligations of companies using AI, a 90-day plan and a checklist for the board meeting.
Get it free →Knowledge is the start. Implementation is our job.
If any of these topics affects your organisation - let's talk specifics.
Consult your project See services →