Plain answers to the questions this category keeps avoiding.
Written to be useful on its own, without a demo attached. If a piece only makes sense as an argument for buying Moustr, it doesn't belong here.
If you're the one who has to sign this off.
Architecture, data handling, the identification setting, and every legal document with its current status showing. Written for the person who reads it properly.
Security and architecture
What crosses the boundary and what never does, EU hosting, the identification mode you control, and the certification position stated honestly.
For IT, security and architects TRUSTLegal and data protection
Terms of Service, DPA, privacy policy and cookie notice — each with its status, including the ones still in draft.
For legal, privacy and DPOsReference, guides and argument.
The EU AI Act, dated honestly
What applies now, what applies in December 2027, and which obligations actually land on a mid-market deployer rather than a provider.
Updated 3 Sep 2026 · 12 minISO 42001 in plain English
What the standard actually asks for, what it maps onto if you already run 27001, and the single clause most organisations cannot currently satisfy.
In production · October 2026 tell me when it's outWhat a network scan can and cannot find
Why AI switched on inside software you already own is invisible to every discovery tool ever built, and what the only remaining route to it is.
In production · October 2026 tell me when it's outBuilding an AI register that survives an audit
The difference between a list and evidence: what a record has to name, who has to confirm it, and how to keep it current without a governance team.
In production · November 2026 tell me when it's outWorks councils and AI discovery
What you must agree before you deploy anything in NL, DE or FR — the DPIA, the briefing note, and the identification setting you choose, which keeps the conversation short.
In production · November 2026 tell me when it's outNobody bought most of this. It just arrived.
AI enters an organisation three ways and only one of them goes through IT. Why the other two account for most of the estate, and why that is ordinary rather than negligent.
In production · October 2026 tell me when it's outAn inventory is not evidence
Most organisations that think they have solved this have produced a spreadsheet. What an auditor asks for next, and why the answer usually takes three weeks to assemble.
In production · November 2026 tell me when it's outAnnouncements
Product releases, partnerships and company news — published only when something has actually happened, with a dateline and a boilerplate.
Company newsroomFour content types, four templates.
Every piece belongs to one of these. If it doesn't fit, it probably shouldn't be written.
Reference pieces carry the heaviest weight for search and for AI retrieval, because they answer one question directly and are worth citing. They are also the cheapest to produce, since the material already exists in the field handbook.