By IddiLabs
A Risk Manager's journey into AI. Articles, real experiments, practical tools and honest lessons from the compliance & operations frontline.
Free offline desktop tool for regulated entities to manage policy and procedure lifecycles. Track versions, document, review schedules, ownership, generate reports, dashboards and enable team access.
Free offline desktop tool for organisations to track issues across departments. Role-based access, file attachments, audit logging, dashboards, and team collaboration.
Free offline desktop tool for Luxembourg financial institutions to manage CSSF Circular Outsourcing Compliance. Track required fields and issues, generate reports, dashboards and enable team access.
Build safe automation with "Permission-First" design. Learn how to use Human-in-the-Loop workflows to gain speed without sacrificing control.
The EU AI Act isn't a tax; it's a flight recorder. Learn how compliance logs turn silent failures into quick fixes, transforming regulation into operational leverage.
AI is revolutionizing how funds value illiquid assets, but who is liable when it fails? We explore the governance framework Luxembourg AIFMs need to satisfy the CSSF and keep "humans in the loop."
Small PSFs can deploy AI in 30 days while big banks are still in procurement. Limited budgets force focus. Small teams move fast. Open-source models run locally. Constraints become advantages.
AI models drift over time and change via vendor updates. Risk managers need version-controlled, static models to ensure reproducible compliance reports—only possible with self-hosted open-source AI.
AI SaaS lock-in is a compliance risk. When vendors change pricing or deprecate models, your workflows break. Open-source models eliminate dependency—you own the asset forever.
AI vendors are now critical ICT dependencies under DORA. Closed-model APIs create concentration, outage, and supply-chain risks. If you haven’t assessed your AI provider, you’re already exposed.
Closed AI models can’t meet the EU AI Act’s transparency and documentation rules. If you can’t explain the model, you can’t deploy it—open-weights models are the only viable path for compliance.