Working notes and practical tools.
29 essays on EU AI Act compliance, data protection, building SaaS in DACH, SEO and delivery — plus guides and tools from our own portfolio.
Pillar guides.
GDPR vs Swiss DSG: Where they diverge
The key differences between the GDPR and the revised Swiss Data Protection Act: legal basis, sanctions, breach notification, records of processing, data protection officers, information duties and representatives.
Retrieval-Augmented Generation (RAG): A Practical Engineering Guide
RAG in practice: preparing documents, chunking sensibly, hybrid search, reranking, enforcing permissions, showing sources and making quality measurable — with notes on German-language text.
AI Features and GDPR: Lawful Processing When an LLM Touches Personal Data
What SaaS providers must settle when AI features process personal data: legal basis, processor agreements, international transfers, data minimisation, transparency and data subject rights.
Public procurement in Switzerland: the complete guide for suppliers
From publication to award: the regimes, procedure types, suitability and award criteria, deadline logic and the go/no-go decision — the guide for suppliers without a bid team.
The family office operating system: why reporting is not the bottleneck
Mandates, beneficial owners, deadlines, documents and invoicing are the daily work of a family office — not consolidation. The guide for boutique practices.
Understanding HERMES: why the method looks the way it does
HERMES is the project management method of the Swiss federal administration. What it achieves, why it looks so formal, and how to apply it without drowning in documentation.
Scrum in practice: what works and what is only called Scrum
Most teams doing Scrum are doing something else. Which elements actually work, which shortcuts destroy the benefit, and when Scrum is the wrong choice.
Project risk management: why registers get written and not read
Almost every project has a risk register, and almost none uses it. Why that happens, what a usable entry looks like, and which risks are systematically overlooked.
Recently published.
Public procurement in Switzerland: the complete guide for suppliers
From publication to award: the regimes, procedure types, suitability and award criteria, deadline logic and the go/no-go decision — the guide for suppliers without a bid team.
The family office operating system: why reporting is not the bottleneck
Mandates, beneficial owners, deadlines, documents and invoicing are the daily work of a family office — not consolidation. The guide for boutique practices.
Finding tenders on simap systematically — instead of searching daily
Why keyword search on simap is unreliable, how to cut search profiles properly, what award publications are good for, and how to cross the language boundary.
Determining UBOs across jurisdictions: why one threshold is not enough
The governing UBO thresholds differ considerably by jurisdiction. How to compute the ownership chain, when control without capital counts, and what belongs documented.
Understanding suitability and award criteria — the most expensive confusion in tendering
Why suitability is a threshold and award is a score, why the lowest price does not win, and how to read the scoring matrix before you cost anything.
KYC and periodic review in a family office: producing evidence as a by-product
Why onboarding is the easier part, how the review rhythm follows risk, which events trigger an out-of-cycle review, and what belongs documented.
Writing a bid for a public buyer: the order of work that prevents mistakes
Separate reconstruction from substance, build the requirements list before writing, plan evidence lead time, and use the question round before you cost anything.
Choosing family office software: the categories and the right opening question
Net-worth tracker, reporting platform, enterprise suite, operating system or spreadsheet — which category fits is decided by the bottleneck, not by assets under management.
Retrieval-Augmented Generation (RAG): A Practical Engineering Guide
RAG in practice: preparing documents, chunking sensibly, hybrid search, reranking, enforcing permissions, showing sources and making quality measurable — with notes on German-language text.
Guides and tools for SMEs and founders.
Free guides and tools from our own portfolio — no email wall.
EU AI Act classification with AI Risk Check
Classifies your AI systems under the AI Act risk tiers and shows the resulting obligations and next steps.
AI literacy under Article 4: guide
What Article 4 requires, who it applies to and how to document AI literacy training traceably.
Subscriptions at a glance with AboTracker
Record subscriptions, see annual costs and spot overlaps.
Data protection impact assessment: when and how
When a DPIA is required, how to structure it and which mistakes are common in practice.
Building SaaS in the DACH region
Stack, data residency, billing and legal basics for a SaaS product sold in Switzerland, Germany and Austria.