Journal
Journal: regulation
On this topic, 10 articles from the journal, from practical guides to behind the scenes of the product.
Software for volunteer condominium managers: service-charge calls, meetings, maintenance
Three condominium platforms, three requests for quotes: nobody displays prices in a profession legally requiring price competition. Work between assemblies fits in a binder. What your own tool can take over, and what stays with the bank.
Read the article
Custom software for a small municipality: tracking residents’ requests
Four publishers share town-hall software and none displays prices. Meanwhile residents' requests, the village hall, and the cemetery are tracked in a binder. What the state requires, what it leaves free, and how a municipality decides.
Read the article
SecNumCloud: business data hosting rules tightened in 2026
An August 2026 order revised the framework for hosts handling sensitive data. Qualification replaces the sales promise. For a business owner, the question is where software data lives and who can prove it in writing.
Read the article
AI Act: transparency obligations affecting your business since August 2
Since August 2, 2026, software talking to your customers must tell them it is artificial intelligence, and its output must be marked. The regulation's heavier provisions were postponed sixteen months. Here is what applies today, with dates and sources.
Read the article
Mandatory electronic invoicing in 2026 and 2027: what your software must do
Since September 1, 2026, every business must be able to receive an electronic invoice. Small and medium-sized businesses must issue them from September 1, 2027. A custom tool remains legitimate for running your business, provided it connects to an approved platform instead of emailing a file.
Read the article
Marking AI-generated content: the December 2, 2026 obligation explained
Two AI Act obligations look alike but target different people: technical marking of generated content, due December 2, 2026 for systems already on the market, and disclosure of AI-written text, applicable since August. Here is what applies to your project.
Read the article
Software for Qualiopi training providers: sessions, attendance, and audit evidence
Software for a training provider helps track sessions and find evidence relevant to Qualiopi, France’s quality certification. It does not award certification. Test filing, missing documents, access rights and exports on a fictional session before choosing a suite or an additional tool.
Read the article
Agentic AI and personal data: who is responsible under GDPR?
In July, the CNIL published a note on agentic AI and personal data. It describes agents passing information from service to service and responsibility becoming difficult to assign. What it says, and what to retain before starting a project.
Read the article
Cyber Resilience Act: reporting obligations from September 11, 2026, explained
Tomorrow, the European cyber resilience regulation opens its first binding chapter: reporting exploited vulnerabilities. What the text requires, whom it applies to, and why the question changes when your software is an internal tool.
Read the article
Automated decisions and GDPR: €825 million for missing human approval
An automated decision depriving a driver of their account without human review: the Dutch authority, working with the CNIL, valued the failure at €824,990,000. Human approval is covered by an article of GDPR, and its absence has a price.
Read the article