The Evidence Layer - English

The Evidence Layer – EN is a podcast about AI, cybersecurity, compliance, digital sovereignty, and the regulations shaping the future of technology.In a world increasingly driven by artificial intelligence, cloud platforms, and automated decision-making, one question is becoming more important than ever:How do you prove that something actually happened?In this podcast, we explore the AI Act, NIS2, DORA, cybersecurity, digital identity, auditability, governance, accountability, and the challenges faced by organizations, governments, and innovators in an increasingly complex digital landscape.Each episode breaks down complex topics into clear, accessible insights, combining real-world examples, emerging trends, and expert-level analysis. We examine the technologies, regulations, and societal shifts that are redefining trust in the digital age.From AI decisions and compliance requirements to European digital sovereignty and the future of verifiable systems, The Evidence Layer explore

8 episodes

2mo ago latest

English language

▶ Play latestRSS feed Website Technology

https://rss.podcast.attesto.eu/public/4/podcast/1f164caf-d9f6-61c0-967e-cb8c2f309eda/feed

Episodes 8

S01E08 - The day the model disappeared: what the Fable 5 export block teaches European organisations about AI evidence liability
2mo ago
June 9, 2026: Anthropic launches Claude Fable 5 — the most capable AI model ever made available for general use, state-of-the-art on nearly all benchmarks, with major advances in software engineering, knowledge work, and scientific research. Three days later, on June 12 at 5:21 PM ET, Anthropic receives an export control directive from the US government: all access for foreign nationals — including Anthropic's own foreign national employees — must be suspended immediately. Fable 5 and Mythos 5 are abruptly disabled for all customers worldwide. Anthropic complied but publicly objected: the demo
S01E07 - Sovereign storage is not enough: why European data lakes are missing the evidence layer
2mo ago
US cloud providers control more than 70% of European cloud infrastructure. Microsoft confirmed under oath at a French Senate hearing in 2025 that it cannot guarantee data sovereignty for European customers facing a legally justified US order. The market's response: European sovereign data lakes that centralise business data from accounting, CRM, HR, and ERP into a private database environment with no CLOUD Act exposure. Sovereign cloud spending in Europe grows 83% year-over-year in 2026. Michael and Nadine explain what a European sovereign data lake does — and what it does not. They walk throu
S01E06 - Data is stored in Europe — but does Europe control it? Data sovereignty and the proof of data transport
2mo ago
Data on a European server is not automatically European. The US CLOUD Act compels American cloud providers to hand over data to the US government — regardless of server location. European supervisory authorities imposed over €7.1 billion in GDPR fines in 2025, a significant share for cross-border transfer violations. The question is no longer whether data leaves the EU — the question is whether organizations can prove it when it happens, and whether they can demonstrate that the legal basis was valid at the time of transfer. Meta's €1.2 billion fine in 2023 set the precedent: paper compliance
S01E05 - Secure-by-design or off the market: the Cyber Resilience Act explained
2mo ago
The Cyber Resilience Act — Regulation EU 2024/2847 — entered into force on December 10, 2024, and rewrites the rules for anyone placing software or hardware on the EU market. From smart thermostats to industrial firewalls: all products with digital elements must now meet mandatory cybersecurity requirements. Manufacturers who cannot demonstrate compliance will no longer be permitted to sell in Europe. Maximum penalties: €15 million or 2.5% of global annual turnover. The regulation applies to non-EU companies too — if your product reaches the European market, the CRA applies. Michael and Nadine
S01E04 - DORA in practice: five pillars, one burden of proof
2mo ago
The Digital Operational Resilience Act — Regulation EU 2022/2554 — has been in force since January 17, 2025, applying to approximately 22,000 financial entities across the EU: banks, insurers, investment firms, payment service providers, and their critical ICT third-party providers. Yet only half are fully compliant. Fines can reach 10% of global annual turnover, and national supervisors across all 27 member states have begun active enforcement. On November 18, 2025, the European Supervisory Authorities designated 19 critical ICT providers — including AWS, Microsoft Azure, and Google Cloud — n
S01E03 - The law is here: EU AI Act and the Dutch Cybersecurity Act, unpacked
2mo ago
August 2, 2026 is no longer on the horizon — it's now. Michael and Nadine break down what Article 12 of the EU AI Act technically demands, why the Dutch Cybersecurity Act makes executives personally liable, and how organizations can achieve demonstrable compliance — not just on paper, but with cryptographically verifiable proof.
S01E02 - Can You Trust What You See? The Rise of C2PA
2mo ago
AI can now generate images, videos, voices, and documents that are nearly indistinguishable from reality. As synthetic content becomes increasingly common, a new question emerges: how can we verify what is authentic? In this episode, we explore C2PA (Coalition for Content Provenance and Authenticity), the emerging open standard designed to bring transparency and provenance to digital content. We explain how content credentials work, which companies are adopting them, and why provenance may become one of the most important building blocks of trust in the AI era. From deepfakes and manipulated m
S01E01 - Why Trust Is No Longer Enough
2mo ago
Artificial Intelligence is making decisions, cybersecurity threats are becoming more sophisticated, and new regulations are reshaping the digital landscape. Yet most organizations still rely on a surprisingly fragile foundation: trust. In this premiere episode of The Evidence Layer, we explore why trust alone is no longer sufficient in a world of AI systems, cloud platforms, automated decisions, and growing regulatory demands. We discuss the rise of verifiable systems, cryptographic evidence, auditability, and accountability, and why proving what happened may soon become more important than cl