Written for the people who have to make the decision.

What AI readiness actually means for a 30-person firm and a 3,000-person group: the EU AI Act deadlines that apply now, how GDPR governs every AI system that touches personal data, and why centralising and organising your data decides whether AI works at all.

Every AI tool a business adopts creates new copies of customer data: in prompts, retrieval indexes, logs and vendor systems. GDPR has not changed, but the number of places it applies has. Where the risk sits, how data residency and self-hosted models change it, and the practical steps that keep personal data under control.

Decision APIs pick from answers you define instead of writing text. What OpenAI’s Decisions API, Jev and rivals can and can’t do, with prices and benchmarks.

AI managing power grids, water supply or road traffic is high-risk under the EU AI Act only where it is a genuine safety component, and part of the scope test is still draft guidance. How utilities, operators and their vendors should classify, and what to build if they are in scope.

Healthcare AI has two EU AI Act deadlines eight months apart, and which applies depends on whether your product is legally a medical device. How to classify correctly, what goes in the technical file, and why health-system procurement is already asking.

Admissions, grading and exam-monitoring tools are high-risk under the EU AI Act, and emotion recognition in proctoring is banned outright. What universities, exam boards and EdTech vendors have to build by December 2027, and why institutional buyers are already asking.

Credit scoring and life or health insurance pricing are high-risk under the EU AI Act, with a mandatory impact assessment for every deployer. What a lender, insurer or payments business has to build by December 2027, and how to do it once for every regulator.

CV screening, candidate ranking and performance monitoring tools are high-risk under the EU AI Act, and one interview-scoring feature is banned outright. What a recruitment business or HR technology vendor has to build by December 2027, and why the commercial effect arrives sooner.

AI agents can triage support tickets, write your documentation, and answer questions from your own records - but only if you feed them your data. Here is what that trade actually costs, and how AI sovereignty lets you get the value without giving up control.

Customers now buy inside AI conversations. The Agentic Commerce Protocol from Stripe and OpenAI lets an AI agent run your checkout while you stay merchant of record. What it costs to adopt, who is already selling through it, and what a retailer should do now.

When an AI agent spends money on your behalf, how do you prove you authorised it? Google’s Agent Payments Protocol gives every agent transaction a signed record of intent. What it means for businesses that sell, buy or underwrite, and what to do now.

x402 lets an AI agent pay for a web resource inside a single request, settled in seconds for a fraction of a penny. What it does to the economics of anything priced per request, its limitations stated plainly, and why for most UK businesses it is a watch item rather than a project.