Andrea Margiovanni .it
ITENFRDE
Home / All essays

All essays.

The full archive. Sorted by date, no algorithm, no engagement score: just the things I wanted to say, in the order they came to me.

16.09 2026
№ 96
AI Cybersecurity AI Agents CRA GDPR Compliance SMBs

A Hundredth of a Second per Target

On Monday the Spanish data protection authority published the first breach notification in which the attack was reportedly carried out by an agent. The interesting part is not that a machine broke into an application. It is that sixteen years ago a researcher worked out how much attention a mass attacker can afford to spend on each target, and the number was a hundredth of a second.

21′ reading time
4,833 words
Read →
13.09 2026
№ 95
CRA Compliance Cybersecurity NIS2 GDPR AI Agents EU Regulation

When Does a Company Know Something?

On Friday the form went live through which European manufacturers report exploited vulnerabilities. It contains a field asking for the date and time you became aware, and a twenty-four-hour clock starts from it. It looks like admin. It is the point where the architecture through which an organisation comes to know something becomes a legal matter.

22′ reading time
4,874 words
Read →
08.09 2026
№ 94
Digital Sovereignty Cloud Europe EU Regulation AI Politics of Technology

The Cost of Changing Your Mind

For years we looked for digital sovereignty in the provider's passport, the location of the data centre, the software licence. Those are fair questions that miss the decisive one: if we want to change our decision tomorrow, can we actually do it, and at what price? Sovereignty as a real option, and a way to count it.

23′ reading time
5,220 words
Read →
04.09 2026
№ 93
Compliance PLD EU Regulation AI Software Development

Redacted

A car stopped dead in a freeway lane at three in the morning, a federal report with three blacked-out fields, two deaths twenty-five days apart, and nobody able to say why. Europe's new Product Liability Directive is criticised from every side as a compensation tool. It does one thing, and that thing matters: it makes not knowing illegitimate.

25′ reading time
5,598 words
Read →
01.09 2026
№ 92
IT Consulting Pricing SMEs AI Digital Transformation

An Outcome Is Not a Price

Why Italy's B2B market wants outcome-based pricing but hasn't yet built the data, the governance and the trust needed to practice it. And why even the most advanced AI vendors don't really price outcomes: they price the smallest verifiable event marketing can still call an outcome.

18′ reading time
4,077 words
Read →
29.08 2026
№ 91
AI AI Agents Digital Sovereignty Software Development Politics of Technology

You Can't Export the Function

On August 28, OpenAI announced it will cut Cursor's access to its models: a contractual clause between third parties, and a function thousands of teams used every day disappears from their environment. No data lost, no API broken. After data and memory, lock-in moves once again: into behavior no export contains.

18′ reading time
4,061 words
Read →
28.08 2026
№ 90
AI AI Agents Compliance Cybersecurity EU Regulation

Authority Arrives Before Intelligence

We describe agents in a technical vocabulary, tool calling, memory, sandboxes. But an agent is not interesting because it does things on its own: it is interesting because someone granted it the right to do things that have consequences. And rights, unlike intelligence, are not acquired. They are delegated. With everything that word carries.

19′ reading time
4,239 words
Read →
27.08 2026
№ 89
AI AI Agents Software Development Work Digital Transformation

Measure What Stays Scarce

Inside Meta, code changes grew 220% while features reaching users grew 36%, and incidents climbed. That is not proof that AI doesn't work: it is the sign that our metrics were counting a scarcity that no longer exists. The first AI-native crisis won't be a technological collapse. It will be a dashboard full of excellent numbers.

18′ reading time
4,023 words
Read →
26.08 2026
№ 88
AI AI Agents Digital Sovereignty Software Development SME Work

The Moat Is Not the Data

Thomson Reuters built its model using less than ten percent of its own content: the hard part was not the corpus, it was deciding what learning correctly from it should mean. Perhaps the advantage of vertical AI is not the data others lack, but the judgment criteria others have not yet had enough experience to build.

16′ reading time
3,599 words
Read →
23.08 2026
№ 87
Digital Sovereignty AI EU Regulation Compliance Software Development Politics of Technology

The Lock-In Won't Be in the Data Anymore

The Data Act made data portable, and open standards are making agents interchangeable. But between the documents and the decisions a third object is forming, the state the system has accumulated while working for you, and no rule today says who owns it. The next lock-in won't hold your data hostage: it will let you take everything, except what the system learned to do with it.

17′ reading time
3,617 words
Read →
85 essays total · 5 featured on the home ← Home
© 2026 Andrea Margiovanni Made with care, by hand