Automation must be controllable.
We answer questions about access, data and accountability upfront.
Only those who need access have it.
Role, not person
When someone leaves, operations do not break.
Least privilege
Only the necessary minimum.
Service identity
Not an employee account.
Vault
Passwords never in code.
Where there is impact, a person decides.
We measure quality on a sample. If it drops, the step goes to a person.
- financial impact
- a change in a core system
- risky external communication
- sensitive data
- an uncertain result
Every critical step leaves a trail.
- time and author of the step
- input, action and output
- approval
- error
- solution version
We know upfront how a solution ends.
- ownership of data and code
- documentation
- data export
- handover to your team
- exit procedure
We know where the data sits.
We set data classification and retention at the start.
- Microsoft in the EU
- Microsoft 365 and Copilot keep data in European data centres.
- Your tools
- We build on Microsoft 365.
- Models by task
- Anthropic, Microsoft and OpenAI. European data centres apply to Microsoft.
- Your own perimeter
- On-premise or in your private cloud.
Processors only under contract, typically Microsoft and Anthropic.
We know the regulatory deadlines.
The AI Act classifies systems by risk. Companies are usually only users.
February 2025
In force. Ban on unacceptable practices.
August 2025
In force. Obligations for providers of general-purpose models.
August 2026
Unchanged. Transparency under Art. 50.
December 2027
Postponed from August 2026. High-risk systems, Annex III.
August 2028
Postponed from August 2027. Regulated products, Annex I.
Based on the European Commission timeline. This is not legal advice.
We state only what we can prove.
- Microsoft Solutions Partner.
- TD SYNNEX Destination AI.A partner programme approved by TD SYNNEX.
- GDPR.See Privacy policy.
- ISO 27001.We do not hold an issued certificate yet. Until we do, we do not present it as complete.
Incident
Write to milo@enterai.cz.
Let us discuss your security requirements.
On one specific flow of work.