I
Banking, insurance & finance
For institutions where regulators have already taken a position on AI — and your auditors will soon.
You are
A regional or universal bank, an insurer, an asset manager. You answer to the ECB, BaFin, FMA, FINMA or the national supervisor. DORA is here, MaRisk has been updated, and your model-risk committee is asking new questions.
DORAMaRiskBaFinGDPREU AI Act
Read the banking view
II
Public sector, defence & sovereignty
For ministries, agencies and armed forces where "where the AI runs" is a question of national interest.
You are
A federal or state ministry, a public agency, a defence procurement office, a critical-infrastructure operator. NIS2 is now law, sovereignty is no longer slogan, and the procurement file asks where the model weights physically reside.
NIS2EU AI ActKRITISBSI C5Air-gap default
Read the public-sector view
III
Healthcare & life sciences
For hospitals, networks and labs where the data subject to special protection is also your most valuable asset.
You are
A teaching hospital, a clinical network, a medical-device manufacturer, a pharmaceutical company. GDPR Article 9 binds you, MDR shapes your roadmap, and your data-protection officer will not approve sending patient records to a public-cloud LLM.
GDPR Art. 9MDRISO 27001HIPAA-equivalent
Read the healthcare view
IV
Events, tourism & cultural institutions
For organisations whose product is presence — stages, exhibitions, destinations, museums.
You are
A tourism board, a national museum, a stage producer, an event agency, a destination-marketing organisation. You compete on experience, on language coverage, and on the craft of a moment — and your audience expects more than a chatbot.
BEA Gold sectorMultilingualLive stageImmersive
Read the events view
V
Law firms & chambers
For practices whose work product carries attorney-client privilege — and whose conflicts file is sacred.
You are
A commercial law firm, a barristers' chambers, an in-house legal department, a litigation boutique. Every email, every brief, every client memo is privileged. The Bar's confidentiality rules are absolute, conflict checking is a daily ritual, and sending a contract to a public chatbot is, on most readings, a breach.
PrivilegeConflictsEU AI ActBar rules
Read the law-firm view
VI
Accounting, audit & tax
For practices whose independence is regulated — and whose engagement file is the audit trail.
You are
A statutory audit firm, a tax practice, an advisory boutique, an internal-audit function. Independence rules govern which tools you can adopt, ISA quality control governs how you document opinions, and the tax code that anchors your work changes every year. Your client data is more sensitive than most banks'.
IndependenceISA 220 / 315IFRS / GAAPTax code
Read the accounting view