Jul 28, 2026
•
6 min read
"Our model is 95% accurate" is not an Article 15 declaration. Here is how to choose the metric, test robustness under real conditions of use, and produce cybersecurity evidence with a date on it.
Jul 21, 2026
4 min read
A practical classification guide for compliance officers — the eight Annex III domains, the Article 6(3) exception, and how to structure an audit-ready decision.
Jul 16, 2026
3 min read
Draft high-risk classification guidelines are out. Consultation closes 23 July. Here is what to verify in your Article 6 documentation before then — and what remains open even after final adoption.
Jun 23, 2026
Jun 16, 2026
Jun 2, 2026
May 26, 2026
2 min read
May 18, 2026
May 12, 2026