EU Public Policy
Positions

At NRY, we believe the arrival of AI calls for a renewed commitment to protecting personal data. Europe wrote the world's reference standard for privacy. The AI era is the moment to prove that standard works in operation, not only on paper.

NRY was founded on the conviction that putting AI to work does not have to cost privacy or fundamental rights. We build under the GDPR every day, for operators in healthcare, finance, retail and infrastructure, and we treat data minimisation, purpose limitation and auditability as engineering requirements, not legal afterthoughts.

Learn more about our approach to data privacy and governance in action.

Read how we keep our own house in order: the Site's cookie statement documents every byte this website stores.

AI's potential has understandably stirred fear and prediction about the future of work. Many claim AI will empty Europe's factories, wards and back offices. Others claim it will make human work obsolete altogether.

At NRY, we have a different perspective: the future need not be defined by displacement or obsolescence. It will be built by Europeans who understand what AI can and cannot do, and who use it to deepen the value of an experienced workforce, on the shop floor, in the control room, on the ward.

This is the future we are building at NRY.

Europe's public procurement rules, with their fixed specifications, multi-year tender cycles and acceptance criteria frozen before a line of software exists, were designed for buying buildings and hardware. They fit badly with how working software is actually delivered: step by step, in production, against the real operation.

NRY supports broad reform of software procurement across the Union: contracts based on outcomes, shorter award cycles, and evaluation on working systems rather than written promises, so that public money buys software proven in operation, not in presentation.

Our work in the field has taught us that the best systems come from the people who build them and the people who run them working together, for a long time.

Legislation and regulation for AI systems should be written the same way: with the operators, the institutions and the places where these systems will actually run. The AI Act's risk-based approach is the right instinct. Its implementation now has to be grounded in operational practice, so that conformity means something in the control room and not only in the file.

Read more in our blog, where we write about handling personal data without losing the operation.

NRY's consistent experience: testing, evaluating and validating an AI system cannot be a paper exercise done once, far from the place the system will run.

Assessment should be practical and in proportion to the risk and complexity of the deployment. A model that drafts marketing copy and a model that schedules an operating theatre do not deserve the same scrutiny, and pretending they do serves neither.

We test our systems where they run: on live operations, with the operators who carry the consequences, against the risk lens the AI Act demands. Our impact studies show what survives that kind of testing.

Europe's standing in AI depends on sustained investment in the computing infrastructure, the energy and the skills that serious AI systems need, and on the honesty to admit that models trained elsewhere still have to run somewhere. Where they run is a choice Europe can still make.

To that end, NRY supports policies that speed up the build-out of European AI infrastructure, compute, grid capacity and sovereign cloud, while keeping the security standards that sensitive applications need.

We build for that choice: Open Systems runs your models on your storage and your compute, anywhere.

At NRY, we believe the future is far brighter when the world's most consequential technologies are built by open societies, and when Europe can field them without asking permission.

Deterrence in the AI era is industrial as much as military. A Europe that cannot build, deploy and sustain its own operational software negotiates from weakness. We build sovereign-ready systems on European soil, and we believe certification, funding and procurement policy should reward fielded capability over paper compliance.

For more on this subject, see our defence work.

As technology becomes central to competitiveness and security, governments across Europe are rightly asking who controls the systems they depend on: where the data lives, who can switch the software off, and on whose terms it runs.

At NRY, we believe Europe should champion a model of digital sovereignty that balances legitimate control with the openness that made European science and industry strong.

That means technical standards built on data controls and governance: sovereignty through verifiable control, not isolation. Systems should prove where data lives and who touched it, run on infrastructure the operator chooses, and stay replaceable without a decade of migration.

Many governments worry about depending on a technology stack they do not control. The answer is not a smaller Europe. It is a Europe that builds, and that holds every vendor, ourselves included, to standards that make dependence safe: exit rights, open interfaces, and data that stays yours.

Europe is stronger when it builds together, and any good future needs systems that let partners work across borders while each one keeps its sovereignty.