组织可以在自己的基础设施上实施AI解决方案，以维护数据主权并遵守法规。这种方法允许进行诸如课程计划、标记支持和报告起草等应用，而无需将敏感的学生或客户数据发送到外部云服务。在本地运行AI可确保数据保留在组织边界内，所有访问都经过记录和审计，这对于满足欧盟AI法案、DORA和GDPR等要求至关重要，特别是对于CV筛选等高风险AI应用。 AI
影响 使组织能够在保持严格数据控制和满足监管义务的同时，利用AI功能。
排序理由 该集群讨论了在组织边界内使用AI的实际实施和合规策略，而不是新的模型发布或重大的行业转变。
在 Mastodon — sigmoid.social 阅读 →
AI 生成摘要 · Google Gemini · 来自 11 个来源。 我们如何撰写摘要 →
Can schools use AI without sending pupil data to the cloud? Yes. Schools and trusts can run AI for lesson planning, marking support and report drafting on infrastructure they control, so pupil data never leaves the boundary and every access is logged in a record safeguarding lead…
Can audit firms use AI on client working papers? Audit firms can use AI on client working papers when it runs inside the firm's own perimeter, each engagement's data is segregated, and every AI-assisted procedure writes to a sealed record the engagement quality reviewer and the r…
How do you run a sovereign AI pilot in 90 days? A sovereign AI pilot takes one workflow with measurable volume, runs it on operator-owned hardware inside the existing perimeter, logs every action to a sealed ledger, and ends with a scale or stop decision made against evidence com…
Can AI run inside an OT network under IEC 62443? Yes. AI can run inside an OT network under IEC 62443 as a local workload within a zone, or in a higher zone fed one way from the process network. An AI service that needs outbound internet from an OT zone creates a conduit the zone…
How long must you keep AI decision logs under the EU AI Act, DORA and GDPR? The EU AI Act requires providers and deployers of high-risk systems to keep automatically generated logs at least six months. DORA retention follows supervisory rules, GDPR requires a documented schedule,…
What hardware do you need to run enterprise AI on-premise? Enterprise AI on-premise runs in three hardware classes: a workstation-class machine for a small team, a multi-GPU server for a department, and a small cluster for an organisation. Memory is the real constraint, and infer…
Is air-gapped AI less capable than cloud AI? For most enterprise work, no longer materially. Models on operator-owned hardware handle drafting, extraction, summarisation and retrieval at production quality. A narrow set of frontier tasks still favours the cloud, and regulated buy…
What does an AI readiness assessment actually check? A serious AI readiness assessment checks five domains: data, infrastructure, governance, people and evidence. The regulated version starts from the audit trail and works backwards, asking whether you can prove afterwards what t…
Is AI CV screening high-risk under the EU AI Act? Yes. Annex III of the EU AI Act lists AI used for recruitment and selection, including screening and filtering applications, as high-risk. The Digital Omnibus moved the compliance deadline to 2 December 2027, but the classificatio…
Does the EU AI Act apply to UK companies selling into the EU? Yes. The EU AI Act applies to providers placing AI systems on the EU market and to providers and deployers outside the EU where the output is used in the EU. A UK firm with EU clients is in scope regardless of Brexit. …
Can you meet NIS2 24-hour incident reporting when AI is in the loop? Yes, but only if the evidence is local. NIS2 requires an early warning within 24 hours of awareness, notification within 72 hours, and a final report within one month. When AI evidence sits in vendor cloud logs …