Blog — Cybersecurity & AI on Angel Sulev | Cybersecurity + Agentic AI

Private LLMs vs ChatGPT: why your company shouldn't use the OpenAI API for sensitive data

Sat, 15 Mar 2025 00:00:00 +0000

Every time your team pastes a contract, an internal email, or customer data into ChatGPT, that information enters OpenAI’s infrastructure. The debate about exactly what OpenAI does with that data is long, but the relevant question for any company is simpler: do you need to take that risk?

The answer is almost always no. The reason many companies still do it is that nobody has explained that a viable alternative exists.

Zero Trust is not a product you buy: it's an architecture you build

Thu, 20 Feb 2025 00:00:00 +0000

In recent years “Zero Trust” has gone from being a rigorous security concept to a marketing label that appears on the sales page of virtually every cybersecurity product. The result is that many organizations believe they have implemented Zero Trust when in reality they have bought a product that mentions it in its brochure.

This article is not meant to discredit the concept — Zero Trust is the right approach. It aims to clarify what it actually means.

EU AI Act: what your company needs to know if you use or plan to use AI

Sat, 18 Jan 2025 00:00:00 +0000

The EU AI Act entered progressive application from August 2024 and its main provisions will be fully mandatory by August 2026. This is not future regulation — it is present. And unlike GDPR, which many companies implemented late, the AI Act has sanctions that make GDPR look moderate: up to €35 million or 7% of global turnover for the most serious violations.

This article is not legal advice. It is a practical guide to understanding whether your company has obligations and what they are.