Blog
AI infrastructure, platform engineering, and EU regulatory compliance — practical insights from 18+ years of enterprise experience.
European Funding Roundup September 2026: €3.5B Across 4 Companies
September 2026's biggest European funding rounds: Mistral AI €3B at €21B valuation, The Exploration Company €387M for space capsules, Tavion €45M for grid batteries, and Limetax €36M for AI-powered tax advisory.
C5 Incident Response for AI Agents
Incident response playbooks for C5-aligned AI agent platforms, covering prompt injection, unauthorized tool calls, RAG leakage, token compromise, and provider outages.
C5 and OWASP LLM Top 10: Security Controls for Agentic AI
Map OWASP LLM Top 10 risks such as prompt injection, sensitive data disclosure, supply chain risk, and excessive agency to C5-style platform controls.
C5 and the AI Act: Where Cloud Controls Meet AI Governance
How C5-style cloud controls can support EU AI Act governance for regulated AI systems through logging, cybersecurity, data governance, provider management, and documentation.
C5 Readiness Assessment for AI Vendors
A buyer-facing C5 readiness checklist for AI vendors covering cloud operations, identity, model providers, RAG, logging, security, and evidence quality.
C5 for Multi-Tenant GenAI SaaS
C5-oriented design patterns for multi-tenant GenAI SaaS: tenant isolation, vector database boundaries, admin access, logging, keys, and leakage testing.
C5 for AI Agent Secrets and Token Management
How to manage secrets, OAuth tokens, API keys, vaulting, rotation, revocation, and emergency kill switches for C5-aligned AI agent platforms.
C5 for Prompt, Trace, and Model Logging
How to design C5-aligned logging for prompts, model traces, tool calls, and retrieved context without creating unnecessary data protection risk.
C5 vs ISO 27001 vs SOC 2 for AI Platforms
When C5, ISO 27001, and SOC 2 matter for AI platforms, how they differ, and how to position them for German and European enterprise buyers.
C5 Evidence Checklist for GenAI Audits
A concrete C5 evidence checklist for GenAI and AI agent platforms: policies, logs, access reviews, vendor records, incident evidence, and data lifecycle proof.
C5 Control Mapping for AI Agent Platforms
Map C5-style cloud control expectations to GenAI platform components: identity, model gateway, RAG, tool execution, logging, secrets, and incident response.
C5 Vendor Due Diligence for the AI Agent Stack
A due-diligence checklist for assessing cloud, identity, model, vector database, and SaaS tool providers used by AI agent platforms under C5-style controls.
C5 Data Controls for RAG: Vector Databases, Embeddings, and AI Agent Context
How to design C5-aligned data controls for RAG systems, including indexing approvals, access enforcement, encryption, retention, deletion, and evidence generation.
C5 Shared Responsibility for GenAI: Cloud, Model, Identity, and Application Controls
How to build a C5 shared responsibility matrix for GenAI platforms that use cloud providers, model APIs, Auth0, vector databases, and internal application teams.
C5 Audit Evidence for AI Agents: Logging, Monitoring, and Control Proof
A practical evidence model for C5-aligned AI agent platforms, covering identity events, authorization decisions, model traces, tool calls, retention, and incident records.
C5 Scope for AI Agent Platforms: What to Include Before the Audit
How to define a practical BSI C5 scope for cloud-hosted AI agent platforms, including identity, model gateways, vector stores, logs, tools, and operational processes.
Auth0 for AI Agents: Task-Scoped, Time-Bound Tokens
How to issue task-scoped, time-bound tokens for AI agents with Auth0: OAuth 2.0, token exchange, and fine-grained policy checks over static API keys.
Showing 18 of 412 articles
Want personalized advice?
These insights come from real engagements. Let's discuss how they apply to your organization.