EU policy makers
12 articles
Sovereign AISovereign AI is a placement problem
Sovereign AI is often discussed as a question of who owns the data centre. In practice it comes down to three engineering questions: where each request runs, who controls the keys, and what can be proven afterwards. Each one can be answered in the infrastructure itself.
5 min read
Financial servicesAI in Financial Services: Records an Examiner Can Verify
Banks, insurers and asset managers are moving AI into credit, claims, compliance and operations. Supervisors in the EU, UK, US and Singapore expect model inventories, third-party oversight and records. What a verifiable inference record should contain, and how to keep it.
4 min read
Confidential computingConfidential Computing for Regulated AI: What Attestation Proves
TEE sessions and remote attestation let a regulated workload run on someone else's hardware with evidence of what code ran. What a report actually proves, what it cannot, and how Tenzro verifies, binds and routes confidential work.
5 min read
Data residencyData residency by design: pinning AI work to a jurisdiction
Residency rules for AI are moving from contract clauses into the request path. This article explains how to make jurisdiction a routing constraint that fails closed, what evidence a signed record of locality can and cannot give you, and how the rules differ across the EU, UK, MENA and APAC.
6 min read
SafetyDesigning Safe Harnesses: Scopes, Limits, Expiry and Revocation
Prompt injection will sometimes succeed, so an agent's safety has to live outside the model. How Tenzro bounds every delegated agent with consensus-enforced scopes, spending limits, expiry, step-up approval and revocation, with an accountable root behind each one.
5 min read
Distributed trainingDistributed Training Across Clusters: What Works Over the WAN Today
Low-communication training has moved from paper to practice, with models trained across continents and among peers who come and go. What the research shows, what still binds, and where an open network of verifiable machines helps.
4 min read
Energy and placementEnergy, power and placement: routing AI work to capacity
Power and grid connections, not chips, now limit where AI capacity can grow. This article sets out what the IEA, the US Department of Energy and EU rules say about data-centre electricity, and why routing flexible inference to where power and capacity already exist is a policy and engineering lever.
5 min read
Sovereign AIEU AI Act, NIS2 and the Data Act: a guide for AI operators
Three EU laws now shape how AI infrastructure is run in Europe. This guide sets out the dates that apply after the 2026 Digital Omnibus on AI, the obligations that reach operators, and the evidence worth producing by default.
7 min read
Hardware identityHardware-Rooted Identity for Machines: TPMs, Enclaves and Passkeys
A key file can be copied, and a copied key is a second machine nobody knows about. Why Tenzro derives every machine and person's identity from keys that never leave hardware, and how that works on servers, laptops and boards without a TPM.
5 min read
Machine economyMachines That Pay Machines: Accounting for Autonomous AI Work
When agents buy inference, data and compute from other machines, the hard parts are accounting, receipts, limits and settlement, not the payment rail. How Tenzro records each payment once, binds it to what was asked and delivered, and settles in the rails people already use.
5 min read
SecurityPreparing AI Infrastructure for Post-Quantum Cryptography
NIST's ML-KEM, ML-DSA and SLH-DSA standards are final, the IETF has standardised hybrid key exchange for TLS, and the US and EU have set dates. A practical migration plan for AI infrastructure, and how Tenzro applies hybrid post-quantum keys today.
5 min read
Public sectorPublic Sector AI: Buying Capability Without Buying Lock-In
Governments in the US, UK and EU now tell agencies to avoid AI vendor lock-in, protect government data from commercial training and assess impacts before deployment. A procurement checklist that turns those policies into contract terms and architecture.
4 min read