https://ragsuite.de/blog/ Sovereign, self-hosted enterprise AI — compliance, architecture and the quality loop. No hype. en Wed, 23 Sep 2026 07:38:48 GMT https://ragsuite.de/blog/mobile-app-now-in-community-edition/ https://ragsuite.de/blog/mobile-app-now-in-community-edition/ Wed, 23 Sep 2026 00:00:00 GMT The RAGSuite mobile app is out of Beta and, from v1.1.0, included in the Community Edition. iOS and Android, signing in to your own self-hosted instance with your own account. What that changes, and the two questions it hands your IT team. Product noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/who-does-your-ai-vendor-answer-to/ https://ragsuite.de/blog/who-does-your-ai-vendor-answer-to/ Tue, 15 Sep 2026 00:00:00 GMT Every AI vendor answers to somebody — a supervisory authority, an owner, and a government that can compel disclosure. Those are three separate chains of accountability, they can point in three different directions, and a procurement questionnaire that asks about one will tell you almost nothing about the other two. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/what-open-core-actually-means/ https://ragsuite.de/blog/what-open-core-actually-means/ Wed, 09 Sep 2026 00:00:00 GMT Most open-core pages describe what you get when you sign. The more revealing question is what you still have after you stop paying. On this product that answer is a property of the Apache 2.0 licence rather than a promise from a vendor — and the commercial terms are published to the top of the ladder. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/connecting-sharepoint-slack-confluence/ https://ragsuite.de/blog/connecting-sharepoint-slack-confluence/ Thu, 03 Sep 2026 00:00:00 GMT SharePoint, Slack, Confluence, Google Drive and Notion now connect to RAGSuite in the open Community Edition, under Apache 2.0. Wiring one up takes minutes — which moves the hard part to where it always belonged: who is allowed to see what. Product noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/free-ai-compliance-tools-no-signup/ https://ragsuite.de/blog/free-ai-compliance-tools-no-signup/ Wed, 02 Sep 2026 00:00:00 GMT All ten tools on ragsuite.de compute in page JavaScript. Nothing you enter into one, and nothing it calculates, is sent anywhere. You do not have to take that on faith — here is how to verify it yourself in thirty seconds, and where the two boundaries of that claim honestly sit. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/the-11-september-reporting-duty/ https://ragsuite.de/blog/the-11-september-reporting-duty/ Tue, 01 Sep 2026 00:00:00 GMT From 11 September 2026, makers of software sold in the EU must report actively exploited vulnerabilities and severe incidents — starting with an alert within 24 hours. The 24-hour form asks for far less than most teams assume, and the registration mechanics are where the real surprises are. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ki-mig-who-supervises-ai-in-germany/ https://ragsuite.de/blog/ki-mig-who-supervises-ai-in-germany/ Wed, 26 Aug 2026 00:00:00 GMT Since 29 July 2026 the Bundesnetzagentur is the market-surveillance authority, national contact point and complaints office for the EU AI Regulation. Most coverage reports that as a handover. The ministry's own announcement says something more specific — and more useful. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ragsuite-is-now-open-source/ https://ragsuite.de/blog/ragsuite-is-now-open-source/ Fri, 21 Aug 2026 00:00:00 GMT The RAGSuite Community Edition is public on GitHub under Apache 2.0, with an install CLI on npm. Three commands and it runs on your own infrastructure — no sales call, no trial gate, no phone-home. Product noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/the-exit-question/ https://ragsuite.de/blog/the-exit-question/ Wed, 19 Aug 2026 00:00:00 GMT 59% of German companies say the biggest barrier to switching cloud provider isn't price or features — it's getting the data out. So the most important thing to test about a vendor is the one nobody tests. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ai-youre-allowed-to-use-regulated-teams/ https://ragsuite.de/blog/ai-youre-allowed-to-use-regulated-teams/ Tue, 18 Aug 2026 00:00:00 GMT Most enterprise AI projects in Germany don't fail on technology — they stall in a meeting with the works council. Five things to require of any vendor, and the parallel conversation with your data protection officer. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/what-is-rag-for-business-leaders/ https://ragsuite.de/blog/what-is-rag-for-business-leaders/ Tue, 11 Aug 2026 00:00:00 GMT RAG means AI that answers from your documents instead of from whatever it absorbed in training — and shows you which document each part of the answer came from. What it does, what it doesn't, and what you need to try it. RAG & Quality noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/sovereign-cloud-transparency-checklist/ https://ragsuite.de/blog/sovereign-cloud-transparency-checklist/ Wed, 05 Aug 2026 00:00:00 GMT 87% say international providers' sovereign offerings don't show enough about how data is processed and who can access it. That's a proof problem, not a vendor problem — and about ten questions fix it. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/sovereign-ai-in-plain-english/ https://ragsuite.de/blog/sovereign-ai-in-plain-english/ Tue, 04 Aug 2026 00:00:00 GMT Sovereign AI comes down to three questions about your own system: where the data physically sits, who could compel someone to hand it over, and whether you can prove both. A jargon-free guide for the person who signs. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ai-act-article-50-disclosure-guidelines/ https://ragsuite.de/blog/ai-act-article-50-disclosure-guidelines/ Wed, 29 Jul 2026 00:00:00 GMT Since 2 August 2026, software that talks to people has to say it is software. The Commission's final Article 50 guidelines set out who owes the disclosure, what fails it, and where the provider/deployer line falls when you self-host. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/sovereign-ai-two-layers/ https://ragsuite.de/blog/sovereign-ai-two-layers/ Mon, 13 Jul 2026 00:00:00 GMT A sovereign model is not the same as a sovereign system. Sovereignty lives at two layers — the model and infrastructure, and the application that reads your data. Where each vendor sits, and how to get both. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/cyber-resilience-act-self-hosted-ai/ https://ragsuite.de/blog/cyber-resilience-act-self-hosted-ai/ Thu, 25 Jun 2026 00:00:00 GMT Self-hosted software is in scope of the EU Cyber Resilience Act; cloud-only AI tools generally aren't. Why that's an advantage — and how RAGSuite is built to it. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/what-is-sovereign-enterprise-ai/ https://ragsuite.de/blog/what-is-sovereign-enterprise-ai/ Wed, 24 Jun 2026 00:00:00 GMT Sovereign enterprise AI means controlling the data, the model, the runtime and the audit trail — not just the hosting region. A precise working definition. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/data-residency-vs-sovereignty/ https://ragsuite.de/blog/data-residency-vs-sovereignty/ Mon, 22 Jun 2026 00:00:00 GMT Data residency is where your data sits; sovereignty is who controls it and who can be compelled to disclose it. Why the distinction decides your AI stack. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/eu-ai-act-dora-nis2-obligation-stack/ https://ragsuite.de/blog/eu-ai-act-dora-nis2-obligation-stack/ Sun, 21 Jun 2026 00:00:00 GMT The EU AI Act, DORA and NIS2 all shape enterprise AI in 2026 — and converge on one demand: documented, auditable control. How the obligation stack fits. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/eu-ai-act-readiness/ https://ragsuite.de/blog/eu-ai-act-readiness/ Sat, 20 Jun 2026 00:00:00 GMT The Digital Omnibus moved the headline high-risk dates — but the case for sovereign, self-hosted AI didn't move with them. Here's the honest timeline. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/self-hosting-architecture-and-operations/ https://ragsuite.de/blog/self-hosting-architecture-and-operations/ Fri, 19 Jun 2026 00:00:00 GMT What it takes to self-host a RAG platform: the reference architecture — PostgreSQL, Redis, a vector store, optional local models — and the operations. Self-Hosting noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/tco-self-hosted-vs-per-seat-rag/ https://ragsuite.de/blog/tco-self-hosted-vs-per-seat-rag/ Thu, 18 Jun 2026 00:00:00 GMT Hosted RAG stacks a per-seat fee on top of per-token metering — and both climb as you roll out. Self-hosting trades a transparent per-seat licence and your own compute against it. How to compare honestly. Self-Hosting noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/how-citation-backed-rag-works/ https://ragsuite.de/blog/how-citation-backed-rag-works/ Wed, 17 Jun 2026 00:00:00 GMT How retrieval-augmented generation grounds answers in your own documents and shows its sources — the pipeline, why citations build trust, and the limits. RAG & Quality noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ai-search-assistant-connectors-triad/ https://ragsuite.de/blog/ai-search-assistant-connectors-triad/ Tue, 16 Jun 2026 00:00:00 GMT How RAGSuite's three parts fit: AI Search for citation-backed answers, an AI Assistant for grounded chat, and AI Connectors to bring your knowledge in. Product noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/cloud-act-and-your-ai-vendor/ https://ragsuite.de/blog/cloud-act-and-your-ai-vendor/ Mon, 15 Jun 2026 00:00:00 GMT The US CLOUD Act lets US authorities compel US-based providers to disclose data — wherever it's stored, including EU regions. What DACH buyers should ask. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/how-to-verify-no-phone-home/ https://ragsuite.de/blog/how-to-verify-no-phone-home/ Sun, 14 Jun 2026 00:00:00 GMT "No phone-home" is a claim you can test, not just trust. How to verify a self-hosted AI platform makes no outbound connections — at the network layer. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/dsgvo-by-design-for-rag/ https://ragsuite.de/blog/dsgvo-by-design-for-rag/ Sat, 13 Jun 2026 00:00:00 GMT How a self-hosted RAG platform maps to DSGVO Articles 5, 25 and 32 — data protection by design in practice, and where the work still sits with you. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/self-hosting-rag/ https://ragsuite.de/blog/self-hosting-rag/ Fri, 12 Jun 2026 00:00:00 GMT Hosted RAG is fast to start and someone else's to run. For a regulated enterprise, the trade you're really making is control. Here's the case for keeping it. Sovereignty noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/do-you-need-a-dpia-for-rag/ https://ragsuite.de/blog/do-you-need-a-dpia-for-rag/ Thu, 11 Jun 2026 00:00:00 GMT A DPIA is required when processing is likely to result in a high risk to individuals. A practical guide to deciding whether your RAG deployment needs one. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/ai-and-the-betriebsrat/ https://ragsuite.de/blog/ai-and-the-betriebsrat/ Wed, 10 Jun 2026 00:00:00 GMT In German companies a works council has a real say over AI tools. Why sovereign, self-hosted AI is easier to get past the Betriebsrat — and how to prepare. Compliance noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/air-gapped-ai-with-offline-licensing/ https://ragsuite.de/blog/air-gapped-ai-with-offline-licensing/ Tue, 09 Jun 2026 00:00:00 GMT An air-gapped deployment has no path to the outside world. How a RAG platform runs fully offline — local models, offline licensing, no phone-home. Self-Hosting noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/choosing-an-llm-for-regulated-rag/ https://ragsuite.de/blog/choosing-an-llm-for-regulated-rag/ Mon, 08 Jun 2026 00:00:00 GMT OpenAI, Anthropic, Mistral, Gemini or local Ollama: the right model for regulated RAG depends on data, quality and cost. A framework for deciding per project. RAG & Quality noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/the-quality-loop-for-rag/ https://ragsuite.de/blog/the-quality-loop-for-rag/ Sun, 07 Jun 2026 00:00:00 GMT Grounding cuts hallucinations, but quality is measured, not assumed. The quality loop — feedback, Compare Models and deep query tracing — is how you do it. RAG & Quality noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/self-hosted-vs-hosted-rag/ https://ragsuite.de/blog/self-hosted-vs-hosted-rag/ Sat, 06 Jun 2026 00:00:00 GMT Hosted RAG starts fastest; self-hosted RAG keeps control. A side-by-side across data, cost, compliance and operations — and when each one wins. Self-Hosting noreply@ragsuite.de (Jürgen Pietschmann) https://ragsuite.de/blog/introducing-ragsuite/ https://ragsuite.de/blog/introducing-ragsuite/ Tue, 02 Jun 2026 00:00:00 GMT RAGSuite is a self-hosted, citation-backed AI platform: AI Search, AI Assistant and AI Connectors across your documents and apps. Open core, DSGVO by design. Product noreply@ragsuite.de (Jürgen Pietschmann)