Residency
Does Claude actually run in the UK? Every Bedrock route, tested
The published sources contradict each other, so we stopped reading them and ran a one-token inference call against every route instead.
· 6 min read
Insights
UK data protection, without the hedging.
Most writing about AI and GDPR is either a scare story or a sales pitch. These are the answers we give clients when they ask what they are actually allowed to do — with the rules cited, and the bits we are unsure about marked as unsure.
WordPress
If you installed an AI plugin on a client site, you are in a processor chain
Installing an AI plugin on a client's WordPress site quietly adds a sub-processor to your care plan. Here is what that means, and how to document it.
· 9 min read
Residency
UK or EU data residency for AI: what actually changes
For UK GDPR, EU hosting is usually fine. Here is precisely when UK residency for AI matters, when it does not, and why procurement disagrees with the law.
· 8 min read
Compliance
Do you need a Transfer Risk Assessment to use AI? A decision tree
A TRA is only required when you rely on an Article 46 safeguard, so for a lot of AI deployments the honest answer is that you do not need one.
· 8 min read
Want the short version?
Your prompts are a restricted transfer if they go to the United States. Ours run in London, so there is nothing to assess.
14 days free on Solo · cancel any time · nothing charged today
Questions about a specific compliance requirement? olly@dijitul.uk