Practical analysis and judgement

Clear ideas on privacy, cybersecurity, AI and digital evidence before the problem arrives.

Executive analysis: which risk to look at, what evidence to keep and which decision to take first.

Latest article

Google Meet with sensitive data: useful, yes. Invisible, no.

The quick read on when a sensitive meeting requires checking subprocessors, regions, recordings, encryption and GDPR before treating the tool as routine.

9 June 2026 12 min read

The dark side of using Google Meet with sensitive data

Google Meet can be a strong tool. The issue starts when a medical consultation, legal meeting, HR or board-level discussion may enter a chain of 30+ possible international destinations without reviewing subprocessors, countries, SCCs and advanced controls.

EEEcontractual starting point 30+possible international destinations CSEadvanced encryption control
  • RGPD
  • Google Meet
  • Datos sensibles
  • Transferencias
29 October 2026 1-minute summary + full guide

ChatGPT, Claude, Copilot and Gemini are not allowed at work if you are going to put personal data in them. Unless you do it this way.

Which plans include a data processing agreement and which do not, where your data goes, the 12 practices that expose you with their alternative and the 6 myths that hold you back for no reason. Sources verified as of 29 October 2026.

  • RGPD
  • ChatGPT
  • Claude
  • Copilot
  • Gemini
25 October 2026 1-minute summary + technical guide

Java can accept forged HTTPS certificates. Here is how to fix it today

CVE-2026-91403 explained: the real risk, why the 21 October patch is not enough and how to fix it with the patch or with four commands.

  • Java
  • CVE-2026-91403
  • eMudhra
  • TLS
22 July 2026 6 min read

GitHub Team does not prove high ENS. Enterprise only lets you try

Keeping critical code in GitHub on a cheap plan does not make you compliant. What fails, the evidence rule and which licence changes the game.

  • GitHub
  • ENS ALTA
  • ISO 27001
  • Enterprise Cloud
5 May 2026 5 min read

Mandatory AI Act for SMEs and freelancers: clear 5-minute summary

If your business uses ChatGPT, Copilot, a chatbot or AI in invoicing, marketing or documents, this is the minimum you should understand.

  • AI Act
  • Autónomos
  • RGPD
  • Chatbots
28 April 2026 17 min read

Mandatory AI Act for SMEs and freelancers: full guide

The extended version with explanations, tables, use examples, penalties, ISO 27001, providers, full checklist and official sources.

  • Guía completa
  • AI Act
  • Checklist
  • Fuentes
27 April 2026 6 min read

Privacy, cybersecurity and AI in 2026: why they can no longer be managed separately

INCIBE, AEPD, the AI Act, NIS2, tax phishing and attacks on infrastructure: several recent developments point in the same direction for leadership and management.

  • RGPD
  • Ciberseguridad
  • AI Act
  • NIS2
Direct contact

If any of these issues are already on the table, it is worth organising them before they become urgent.

Tell me the context and I will prepare an initial assessment on privacy, security, AI, ENS/ISO 27001 or digital evidence.

WhatsApp