Notes on data, AI, IT
and security
No marketing fog. The way I think about real problems with founders and managers.
The coding agent and the new assembly point of development
GitHub Copilot is becoming an agent that can execute development tasks autonomously. What this changes for companies that commission or run software development.
Context windows and knowledge management in a company
How growing language model capabilities affect how companies can organise access to corporate knowledge.
IT budget without transparency: why the numbers diverge from reality
How companies lose control of IT spending, and what it takes for the budget to reflect what is actually happening.
SaaS supply chain attacks: lessons for managers
Incidents from early 2025 show that a company's security perimeter now runs through its SaaS providers. What this means in practice.
Data freshness and operational decisions
When stale data costs money, and how to understand which data in your company needs to be current and which does not.
Cloud vendor lock-in: the cost that does not appear in the invoice
Dependency on a single cloud provider looks cheap on paper until the moment you need to renegotiate, migrate, or recover from an outage. What to account for before you are locked in.
AI agent systems: moving from demo to platform
New tools for building AI agents are changing the conversation from 'is this possible' to 'how do we manage this in production'.
RAG in production: what architects actually need to decide
Retrieval-augmented generation has become the default pattern for corporate AI. I break down what architectural decisions actually matter and where the traps are.
Internal APIs as the backbone of IT architecture
Why companies that treat internal APIs as technical details pay a steep price with every integration and every change.
The EU AI Act: where the red zone starts for business
The first binding rules of the EU AI Act on prohibited practices came into force in February 2025. What this means for companies using or planning to use AI.
DeepSeek-R1: reasoning as a new dimension of competition
What the release of DeepSeek-R1 means for companies thinking about AI: cost, openness, and practical consequences.
A data platform versus a collection of tools: how to tell the difference
Why many companies believe they have a data platform when they actually have a pile of tools - and what to do about it.