EU regulations

Compliant by construction.

Kaldryn is built for organisations that answer to European regulators, the compliance work ships in the box instead of landing on your desk.

EU AI Act

Deployer obligations are mapped and tooled: the Article 50 transparency banner is built in and locale-aware, the Article 4 AI-literacy module trains and certifies your staff, and FRIA / DPIA templates arrive pre-filled with a risk catalogue.

See the detail

GDPR

Article 17 erasure propagates across conversations, documents, embeddings, fine-tunes and backups. EDPB guidance on LLMs is integrated, DPA templates ship with healthcare and DORA addenda, and data residency is your own hardware.

See the detail

Sector overlays

Healthcare (MDR / IVDR, EHDS), public sector (FRIA, registries, NIS2), finance (DORA, CRA, EBA) and the Nordics (IMY, Dataskyddslagen, Offentlighetsprincipen) each get a dedicated overlay.

See the detail

Not a legal guarantee. Kaldryn ships the tooling and the documentation scaffolding; your EU-qualified lawyer does the final review.

Latest briefings

Regulation, translated for AI deployers.

AI Act (Regulation (EU) 2024/1689), as amended by the 2026 Digital OmnibusFeatured

The AI Act deadlines just moved: what the 2026 Digital Omnibus changed

In mid-2026 the EU pushed back the AI Act's high-risk deadlines. Here is what moved, what did not, and what deployers should actually do about it.

EU AI Act2 July 20263 min read

Read the briefing

11 published

EU AI Act (Regulation 2024/1689)applies 2 August 2026

The EU AI Act timeline: what applies now and what's coming

A plain-language walkthrough of the AI Act's phased application dates, what organisations deploying AI must already comply with, and what lands next.

EU AI Act1 July 20262 min read

Cyber Resilience Act (Regulation (EU) 2024/2847)applies 11 December 2027

The Cyber Resilience Act: security duties for anything with software

The Cyber Resilience Act sets baseline security rules for products with digital elements. What it requires, when it bites, and how it touches AI systems.

Sector rules24 June 20263 min read

GDPR (Regulation 2016/679)

GDPR and self-hosted LLMs: the questions your DPO will ask

Lawful basis, minimisation, the right to erasure and embeddings, DPIAs, how the GDPR conversation changes when the model runs on your own hardware.

GDPR18 June 20262 min read

European Health Data Space (Regulation (EU) 2025/327)applies 26 March 2025

The European Health Data Space and AI in care: what changes

The EHDS Regulation entered into force in March 2025. What it means for health data, secure processing environments, and AI that runs where the data lives.

Health data10 June 20263 min read

NIS2 Directive (2022/2555)applies 17 October 2024

NIS2 and your AI infrastructure: what the directive means in practice

NIS2 pulls tens of thousands of EU organisations into a real cybersecurity regime. If AI is becoming load-bearing infrastructure for you, it's in scope too.

NIS25 June 20262 min read

AI Act (Regulation (EU) 2024/1689), Article 50applies 2 August 2026

Article 50 in practice: telling people when they are talking to AI

From August 2026 the AI Act requires you to disclose AI interactions and label AI-generated content. A practical look at what Article 50 asks for.

EU AI Act6 May 20263 min read

GDPR (Regulation (EU) 2016/679), Chapter V, and CJEU C-311/18applies 16 July 2020

Schrems II, six years on: where EU to US data transfers stand in 2026

The Schrems II ruling still shapes every EU to US data transfer. A look at the Data Privacy Framework, its wobble, and why some data should just stay home.

Data transfers15 April 20263 min read

AI Act (Regulation (EU) 2024/1689), Article 4applies 2 February 2025

AI literacy is now a legal duty: reading Article 4 of the AI Act

Since February 2025 the AI Act has required organisations to make sure staff who use AI understand it. What Article 4 asks for, and how to satisfy it.

EU AI Act11 March 20263 min read

Digital Operational Resilience Act (Regulation (EU) 2022/2554)applies 17 January 2025

DORA and AI: what financial firms have to prove about their models

DORA has applied since January 2025 and it worries openly about cloud concentration. What that means for banks and insurers running AI on third-party clouds.

DORA27 February 20263 min read

EU Data Act (Regulation (EU) 2023/2854)applies 12 September 2025

The EU Data Act in plain words: what it changes for cloud and AI

The EU Data Act has applied since September 2025. Here is what it actually changes for cloud switching, egress fees and foreign access to your data.

EU Data Act18 February 20263 min read

On your hardware. Under your signature.

Bring the AI in-house.

Talk to our team about a Kaldryn deployment, or a pre-built appliance shipped ready to seal.

Talk to Sales

or email info@kaldryn.com