Does the EU AI Act apply to my company?
If you develop, deploy or distribute an AI system in the European Union, yes. The timeline then depends on your use case: prohibited practices have applied since 2 February 2025, and general-purpose AI (GPAI) model obligations since 2 August 2025. The simplification package known as the “digital omnibus”, endorsed by Parliament on 16 June 2026 and given final approval by the Council on 29 June 2026, defers Annex III high-risk obligations to 2 December 2027 and Annex I obligations to 2 August 2028. Most enterprise use cases are not high-risk — but that has to be established and documented.
Can we send customer data to ChatGPT or another external LLM?
Not as things stand. Sending personal data to an LLM hosted outside your perimeter makes you a controller under the GDPR: you need a lawful basis, a defined purpose, a retention period, and — if the provider sits outside the EU — a transfer mechanism. The approach I deploy inverts the problem: sensitive data is anonymised or pseudonymised on-premise before it leaves your infrastructure. The model never sees the identifier.
How long from POC to a system actually in production?
Six to twelve weeks for a first system in daily use, provided the data exists and is reachable. What takes the time is almost never the model: it is data access, permissions, integration with existing systems, and handling the edge cases.
Do you deploy models on-premise?
Yes, and it is the core of the offer. Open-weight models running on your own infrastructure or in an EU cloud, redaction applied upstream, and no sensitive data handed to a third-party provider. It is often the only arrangement that makes AI on regulated data defensible.
Who is behind AlphaOscar?
Alexandre Orfèvre — twenty years of technical products across fintech, regulated data and blockchain, including BNP Paribas and Thales, and today CPO of Rekord AG. AlphaOscar is his holding: he builds and runs his own SaaS products there, and builds custom products for clients. AlphaOscar is a French SARL registered with the Paris commercial court under SIREN 910 288 299.