Transfer Risk
2 articles
Articles
7 October 2026
Schrems II Training Data: Where Third-Country Risk Bites
A training pipeline can disclose personal data through storage, annotation, tracking, registries, compute and evaluation. Map each system and assess each disclosure against the EDPB transfer criteria.
29 April 2026
GPU Cloud Data Sovereignty: Navigating US and EU Infrastructure
As hyperscaler credits expire, AI startups face a critical choice between US-based convenience and European legal certainty. Understanding the jurisdictional reach of the US Cloud Act, and the fact that the EU AI Act itself imposes no data-residency requirement, is now a technical and operational necessity.