<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Compsia insights</title><link>https://compsia.com/blog</link><description>Compsia designs, deploys and operates custom AI production systems around defined business results.</description><language>en</language><lastBuildDate>Fri, 14 Aug 2026 00:00:00 GMT</lastBuildDate><item><title>AI Production Security Checklist: Two Release Gates</title><link>https://compsia.com/blog/ai-production-security-gates</link><guid isPermaLink="true">https://compsia.com/blog/ai-production-security-gates</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Use two practical security gates to decide when an AI system may process real data and when it may run recurring, action-capable production work.</description></item><item><title>AI Agent Write Access: A Safe Permission Model</title><link>https://compsia.com/blog/ai-agent-write-access</link><guid isPermaLink="true">https://compsia.com/blog/ai-agent-write-access</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Learn how to separate AI agent read, draft, and write authority with scoped tools, deterministic policy, authenticated approval, and replay-safe execution.</description></item><item><title>RAG Access Control: Enforce Permissions at Retrieval</title><link>https://compsia.com/blog/rag-access-control</link><guid isPermaLink="true">https://compsia.com/blog/rag-access-control</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Design permission-aware RAG with caller identity, source authorization, filtered retrieval, evidence checks, safe caching, and production access tests.</description></item><item><title>Private AI Security: Why Hosting Is Only One Control</title><link>https://compsia.com/blog/private-ai-security</link><guid isPermaLink="true">https://compsia.com/blog/private-ai-security</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Assess private AI security across identity, retrieval, applications, tools, releases, and operation before treating hosting ownership as protection.</description></item><item><title>AI Environment Isolation: Lessons From a Production Incident</title><link>https://compsia.com/blog/ai-environment-isolation</link><guid isPermaLink="true">https://compsia.com/blog/ai-environment-isolation</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Learn how separate data, runtimes, credentials, releases, side effects, target assertions, backups, and tripwires protect AI production environments.</description></item><item><title>Secure Enterprise AI Solutions: What Buyers Should Compare</title><link>https://compsia.com/blog/secure-enterprise-ai-solutions</link><guid isPermaLink="true">https://compsia.com/blog/secure-enterprise-ai-solutions</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Compare secure enterprise AI solutions by business result, data, integrations, permissions, testing, evidence, operation, and total responsibility.</description></item><item><title>25 AI Vendor Security Questions for Enterprise Buyers</title><link>https://compsia.com/blog/ai-vendor-security-questions</link><guid isPermaLink="true">https://compsia.com/blog/ai-vendor-security-questions</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Use 25 AI vendor security questions to assess data paths, providers, access, retrieval, model controls, actions, evidence, and production operation.</description></item><item><title>EU AI Act 2026: What Businesses Must Do Now</title><link>https://compsia.com/blog/eu-ai-act-2026</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-2026</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Understand the EU AI Act&#039;s current deadlines, classify one AI system, assign provider and deployer roles, and build an evidence-based action plan.</description></item><item><title>EU AI Act Compliance Checklist for Enterprise Systems</title><link>https://compsia.com/blog/eu-ai-act-compliance-checklist</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-compliance-checklist</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Use a seven-stage EU AI Act compliance checklist covering scope, roles, classification, immediate duties, suppliers, release evidence, and monitoring.</description></item><item><title>EU AI Act High-Risk Systems: A Classification Guide</title><link>https://compsia.com/blog/eu-ai-act-high-risk-systems</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-high-risk-systems</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Learn how intended purpose, Article 6, Annex I, and Annex III determine high-risk AI classification, and why human approval is a control, not an exemption.</description></item><item><title>EU AI Act Provider vs Deployer: Assign the Right Role</title><link>https://compsia.com/blog/eu-ai-act-provider-vs-deployer</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-provider-vs-deployer</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Compare EU AI Act provider and deployer roles using intended purpose, branding, development, release control, operation, and Article 25 changes.</description></item><item><title>EU AI Act AI Literacy: A Practical Article 4 Plan</title><link>https://compsia.com/blog/eu-ai-act-ai-literacy</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-ai-literacy</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Build role-based EU AI Act literacy measures for users, approvers, system owners, and technical administrators using practical failure cases.</description></item><item><title>AI System Inventory for EU AI Act Readiness</title><link>https://compsia.com/blog/ai-system-inventory-eu-ai-act</link><guid isPermaLink="true">https://compsia.com/blog/ai-system-inventory-eu-ai-act</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Build an AI system inventory covering purpose, roles, data, models, retrieval, actions, classification, evidence, versions, and review triggers.</description></item><item><title>EU AI Act Risk Classification: A Decision Tree</title><link>https://compsia.com/blog/eu-ai-act-risk-classification</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-risk-classification</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Classify an AI system through scope, prohibited practices, high-risk uses, Article 50 transparency, GPAI duties, roles, and review triggers.</description></item><item><title>EU AI Act vs GDPR: Two Reviews, One System Map</title><link>https://compsia.com/blog/eu-ai-act-vs-gdpr</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-vs-gdpr</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Compare the EU AI Act and GDPR across scope, roles, purpose, data, risk assessments, providers, logs, rights, and shared system evidence.</description></item><item><title>EU AI Act Prohibited Practices: An Article 5 Screen</title><link>https://compsia.com/blog/eu-ai-act-prohibited-practices</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-prohibited-practices</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Screen proposed AI uses against Article 5 using the practice, affected people, data, objective, effect, exceptions, and enforceable system limits.</description></item><item><title>EU AI Act Article 50: Transparency Rules Explained</title><link>https://compsia.com/blog/eu-ai-act-article-50-transparency</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-article-50-transparency</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Apply Article 50 across direct AI interactions, machine-readable marking, deepfakes, public-interest text, human review, and accessible disclosure.</description></item><item><title>EU AI Act Human Oversight: Design a Real Control</title><link>https://compsia.com/blog/eu-ai-act-human-oversight</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-human-oversight</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Design EU AI Act human oversight around identity, competence, context, authority, timing, evidence, automation bias, intervention, and safe stopping.</description></item><item><title>EU AI Act Logging Requirements for Production Systems</title><link>https://compsia.com/blog/eu-ai-act-logging-requirements</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-logging-requirements</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Design AI Act logs across requests, sources, models, policy, approvals, execution, outcomes, retention, privacy, investigation, and recovery.</description></item><item><title>EU AI Act Technical Documentation: Build the System File</title><link>https://compsia.com/blog/eu-ai-act-technical-documentation</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-technical-documentation</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Build EU AI Act technical documentation across purpose, design, data, performance, risk, controls, release evidence, operation, and change history.</description></item><item><title>RAG and the EU AI Act: Data, Access and Evidence</title><link>https://compsia.com/blog/eu-ai-act-rag-compliance</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-rag-compliance</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Assess RAG under the EU AI Act across classification, data roles, source scope, authorization, indexing, ranking, model context, provenance, and change.</description></item><item><title>EU AI Act and AI Agents: Classify Purpose, Control Action</title><link>https://compsia.com/blog/eu-ai-act-ai-agents</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-ai-agents</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Assess AI agents under the EU AI Act by intended purpose, role, tool authority, deterministic policy, human oversight, execution evidence, and change.</description></item><item><title>25 EU AI Act Questions to Ask an AI Vendor</title><link>https://compsia.com/blog/eu-ai-act-vendor-checklist</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-vendor-checklist</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Ask AI vendors 25 questions about roles, classification, models, data, documentation, transparency, oversight, logs, incidents, changes, and exit.</description></item><item><title>GPAI Code of Practice: What Enterprise Buyers Need</title><link>https://compsia.com/blog/gpai-code-of-practice-enterprise-buyers</link><guid isPermaLink="true">https://compsia.com/blog/gpai-code-of-practice-enterprise-buyers</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Understand the GPAI Code&#039;s scope, chapters, signatory evidence, provider questions, downstream limits, model-route records, and change triggers.</description></item><item><title>EU AI Act Substantial Modification: A Change Review</title><link>https://compsia.com/blog/eu-ai-act-substantial-modification</link><guid isPermaLink="true">https://compsia.com/blog/eu-ai-act-substantial-modification</guid><pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate><description>Review AI system changes across purpose, people, models, data, authority, performance, branding, evidence, contracts, and provider responsibility.</description></item><item><title>What Is AI Automation? A Production Definition</title><link>https://compsia.com/blog/what-is-ai-automation</link><guid isPermaLink="true">https://compsia.com/blog/what-is-ai-automation</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>AI automation explained for business leaders: what it is, how it differs from ordinary automation, when to use it and what production readiness requires.</description></item><item><title>AI Agents vs Workflows: Choose by Decision Freedom</title><link>https://compsia.com/blog/ai-agents-vs-workflows</link><guid isPermaLink="true">https://compsia.com/blog/ai-agents-vs-workflows</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Compare AI agents and workflows by autonomy, variability, testability, authority and production risk—and choose the smallest architecture that fits the result.</description></item><item><title>AI Automation Examples That Belong in Production</title><link>https://compsia.com/blog/ai-automation-examples</link><guid isPermaLink="true">https://compsia.com/blog/ai-automation-examples</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Five realistic AI automation examples with sources, controls, approval boundaries, fallback and measures—from document intake to account operations.</description></item><item><title>AI Automation ROI: A Baseline-to-Operation Framework</title><link>https://compsia.com/blog/ai-automation-roi</link><guid isPermaLink="true">https://compsia.com/blog/ai-automation-roi</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Calculate AI automation ROI without invented productivity claims: establish a baseline, count full operating cost, measure accepted outcomes and account for risk.</description></item><item><title>AI Automation Costs: What a Production Budget Must Include</title><link>https://compsia.com/blog/ai-automation-costs</link><guid isPermaLink="true">https://compsia.com/blog/ai-automation-costs</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Understand AI automation costs across design, integration, data, acceptance, adoption, model usage, monitoring, support and controlled change.</description></item><item><title>AI and GDPR Compliance: A System-by-System Framework</title><link>https://compsia.com/blog/ai-gdpr-compliance</link><guid isPermaLink="true">https://compsia.com/blog/ai-gdpr-compliance</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>A system-level GDPR framework for AI: purpose, role, lawful basis, minimisation, transparency, rights, providers, security and accountability.</description></item><item><title>AI Data Privacy: Map the Full Context Path</title><link>https://compsia.com/blog/ai-data-privacy</link><guid isPermaLink="true">https://compsia.com/blog/ai-data-privacy</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>A production guide to AI data privacy across prompts, retrieval, model providers, tools, logs, outputs, human review, retention and deletion.</description></item><item><title>AI Governance: From Policy to Production Decisions</title><link>https://compsia.com/blog/ai-governance</link><guid isPermaLink="true">https://compsia.com/blog/ai-governance</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>An operational AI governance model for portfolio selection, system ownership, risk classification, acceptance, release evidence, monitoring and retirement.</description></item><item><title>Secure Enterprise AI: A Production System Framework</title><link>https://compsia.com/blog/secure-enterprise-ai</link><guid isPermaLink="true">https://compsia.com/blog/secure-enterprise-ai</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Learn how to assess secure enterprise AI across data, identities, retrieval, models, tools, actions, testing, releases, and ongoing operation.</description></item><item><title>Private AI Infrastructure: Define the Right Boundary</title><link>https://compsia.com/blog/private-ai-infrastructure</link><guid isPermaLink="true">https://compsia.com/blog/private-ai-infrastructure</guid><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><description>Compare private AI infrastructure patterns across data, network, compute, models, tenancy, and geography, with a practical requirement framework.</description></item></channel></rss>
