Enterprise readiness and compliance

We are neither lawyers nor auditors, just engineers. However, we want to leave you with some insights and recommendations regarding meeting compliance expectations. First and foremost, you should be aware of the requirements that prevailing regulation has for your application. For example, if you’re reading this book, you likely fall under some form of data protection regulation, such as the General Data Protection Regulation (GDPR) in the European Union. You may also fall under AI-specific regulation, such as the newly published EU AI Act. If you work in a larger organization, you’ll have access to legal and compliance departments that can inform you about the regulations that are relevant to you. If you’re building something for yourself, we recommend that you get support if you intend to publish your application to users.

Regardless, you should consider establishing a governance, risk, and compliance (GRC) framework to...