The Evidence Layer - English

June 9, 2026: Anthropic launches Claude Fable 5 — the most capable AI model ever made available for general use, state-of-the-art on nearly all benchmarks, with major advances in software engineering, knowledge work, and scientific research. Three days later, on June 12 at 5:21 PM ET, Anthropic receives an export control directive from the US government: all access for foreign nationals — includin...

US cloud providers control more than 70% of European cloud infrastructure. Microsoft confirmed under oath at a French Senate hearing in 2025 that it cannot guarantee data sovereignty for European customers facing a legally justified US order. The market's response: European sovereign data lakes that centralise business data from accounting, CRM, HR, and ERP into a private database environment with...

Data on a European server is not automatically European. The US CLOUD Act compels American cloud providers to hand over data to the US government — regardless of server location. European supervisory authorities imposed over €7.1 billion in GDPR fines in 2025, a significant share for cross-border transfer violations. The question is no longer whether data leaves the EU — the question is whether or...

The Cyber Resilience Act — Regulation EU 2024/2847 — entered into force on December 10, 2024, and rewrites the rules for anyone placing software or hardware on the EU market. From smart thermostats to industrial firewalls: all products with digital elements must now meet mandatory cybersecurity requirements. Manufacturers who cannot demonstrate compliance will no longer be permitted to sell in Eur...

The Digital Operational Resilience Act — Regulation EU 2022/2554 — has been in force since January 17, 2025, applying to approximately 22,000 financial entities across the EU: banks, insurers, investment firms, payment service providers, and their critical ICT third-party providers. Yet only half are fully compliant. Fines can reach 10% of global annual turnover, and national supervisors across al...

August 2, 2026 is no longer on the horizon — it's now. Michael and Nadine break down what Article 12 of the EU AI Act technically demands, why the Dutch Cybersecurity Act makes executives personally liable, and how organizations can achieve demonstrable compliance — not just on paper, but with cryptographically verifiable proof.

AI can now generate images, videos, voices, and documents that are nearly indistinguishable from reality. As synthetic content becomes increasingly common, a new question emerges: how can we verify what is authentic? In this episode, we explore C2PA (Coalition for Content Provenance and Authenticity), the emerging open standard designed to bring transparency and provenance to digital content. We e...

Artificial Intelligence is making decisions, cybersecurity threats are becoming more sophisticated, and new regulations are reshaping the digital landscape. Yet most organizations still rely on a surprisingly fragile foundation: trust. In this premiere episode of The Evidence Layer, we explore why trust alone is no longer sufficient in a world of AI systems, cloud platforms, automated decisions, a...