SovereigntyFeatured
Europe’s missing compliance layer
Europe is building sovereign payments and sovereign AI. The layer that interprets its regulation still runs on foreign software.
Martin Foerster · · 3 min read
Thought Leadership
Sovereign compliance
Essays on who gets to interpret European law — and why the infrastructure that reads a regulation is a question of sovereignty, not just software.
Written in Berlin · processed and hosted in the European Union
18 essays
Sovereignty
Compliance GuidesRegulatory compliance: consultants vs. software vs. in-house
Three ways to handle EU regulatory requirements — external consultants, an in-house team, and compliance software — with an honest comparison of where each one wins.
Martin Foerster · · 5 min read
Compliance GuidesNon-EU company selling into the EU: what must you comply with?
EU law reaches you even without an EU office. Which requirements apply when you target the EU market — GDPR, the AI Act, DORA, and product rules — and what each one asks of you.
Jan Jensen · · 5 min read
Compliance GuidesDoes the EU AI Act apply to us, and at what risk tier?
The EU AI Act applies if you develop, place on the market, or deploy AI systems that touch the EU. Your requirements scale with the risk tier — here are the four tiers and what each one requires.
Martin Foerster · · 5 min read
Compliance GuidesDoes NIS2 apply to my business?
NIS2 applies to medium-sized and larger entities in a defined list of essential and important sectors — plus some entities regardless of size. Here is how to tell if you are in scope.
Martin Foerster · · 5 min read
RegulationThe wall under EU–US data transfers just moved
A US ruling on who controls the FTC has quietly unsettled the legal basis for moving European data across the Atlantic.
Jan Jensen · · 3 min read
RegulationThe Data Privacy Framework on borrowed time
A US ruling on who controls the Federal Trade Commission has quietly removed a load-bearing assumption beneath every transfer of European data to the United States.
Jan Jensen · · 10 min read
Compliance GuidesDoes DORA apply to my company?
DORA applies to EU financial entities and their ICT third-party providers. Two tests, a decision path, and what it requires if you’re in scope.
Jan Jensen · · 5 min read
ArchitectureWhen you paste a contract into an AI, who else can read it?
Checking a draft contract or a live incident against European law by running it through a foreign AI transmits the full text to a provider under foreign jurisdiction. That is a disclosure, and it may be one you never learn about.
Martin Foerster · · 3 min read
Compliance GuidesWhich EU regulations does my company need to comply with?
A practical way to scope which EU regulations apply to your business — by sector, size, data, and activity — with a business-type-to-regulation map.
Jan Jensen · · 6 min read
SovereigntyThe layer Europe’s sovereignty push forgot
The 3 June package targets chips, cloud, and AI. It says almost nothing about the systems that interpret Europe’s own regulation.
Martin Foerster · · 2 min read
SovereigntyThe sovereignty test
A short set of questions that separates genuine digital sovereignty from an EU region with a sovereignty label, applied honestly to ourselves as well.
Jan Jensen · · 2 min read
RegulationCompliance outgrew the spreadsheet
For most companies, compliance still lives in a spreadsheet held together by one overworked person. It breaks in four predictable places.
Martin Foerster · · 3 min read
ArchitectureThe case for keeping your documents where they are
The industry standard is to pull a customer’s documents into the vendor’s cloud. For regulated European firms, that convenience is the exposure.
Jan Jensen · · 3 min read
RegulationYour compliance tool is a third-party risk
DORA made banks map every critical technology provider. Few have turned that discipline on the software they use to manage compliance itself.
Martin Foerster · · 2 min read
GeopoliticsThe payments channel Europe built and never used
In 2019 three of Europe’s largest economies built a mechanism to trade around US sanctions. Its near-total failure is the clearest lesson in dependency Europe has.
Martin Foerster · · 2 min read
SovereigntyWhat sovereign compliance actually means
The term is appearing on every European vendor’s website. Most uses describe where data sits, not who controls it.
Martin Foerster · · 3 min read
ArchitectureWho interprets European law?
For fifteen years European data protection has asked where information is stored. Artificial intelligence has changed the question to where regulation is understood.
Jan Jensen · · 4 min read