Notes on AI that actually helps.

What we learn building AI tools for real businesses — written in plain language, with real examples. No hype, no names.

Business & compliance

20 September 2026·5 min read

Gemini can now read and write into your CRM from Gmail — who in your SMB decided that?

On September 18, 2026, Google announced that Gemini in Workspace connects directly, via the Model Context Protocol (MCP), to seven business tools — Asana, Atlassian Rovo, HubSpot, Intuit Mailchimp, Intuit QuickBooks, Monday and Salesforce — from Gmail, Docs, Sheets, Drive and Chat. Activation is per-connector, set by an admin at the organizational-unit level, not per employee. What that means for an SMB running its CRM or accounting through one of these tools.

Read →

Business & compliance

13 September 2026·5 min read

The EU Cyber Resilience Act’s vulnerability-reporting duty is now live — and it may already apply to your software

On September 11, 2026, Article 14 of the EU Cyber Resilience Act took effect: any company that "manufactures" a product with digital elements — hardware or software sold under its own brand — must now report an actively exploited vulnerability within 24 hours and a severe incident within 72 hours, to ENISA and France’s national CSIRT, under fines of up to €15 million or 2.5% of global turnover. A 2024 academic survey found only 12.3% of SMEs were even aware the regulation existed. Here is what actually changed, who it concerns, and where to start.

Read →

Business & compliance

10 September 2026·4 min read

CNIL fines Extia €300,000 over botched erasure requests: what it changes for any SMB that recruits

On September 9, 2026, the CNIL published a €300,000 fine against IT staffing firm Extia for mishandling 265 erasure requests from candidates and former employees in 2024 — more than three-quarters were not processed correctly. The ruling draws a sharp line most small recruiting teams miss: deleting the data is not enough if you never tell the person you did it.

Read →

Business & compliance

4 September 2026·5 min read

CNIL fines a hospital €500,000 for no MFA, no VPN: the RGPD security checklist that applies to your SMB too

On September 3, 2026, the CNIL published a €500,000 fine against the Hôpital Privé de la Loire for failing to secure the records of 524,867 patients — no VPN, no multi-factor authentication, and a shared temporary password for every practitioner. The legal basis, RGPD Article 32, applies identically to a ten-person SMB.

Read →

Business & compliance

2 September 2026·5 min read

E-invoicing goes live and business owners fear a hack — Bercy imposes an emergency cyber audit on approved platforms

On August 26, 2026, France’s minister for Public Accounts, David Amiel, summoned the roughly 150 state-approved e-invoicing platforms to Bercy and gave them until the end of September to prove their security — or be suspended. A direct answer to SME leaders’ fears after the DGFiP tax data breach revealed in August. What this new audit changes for how you choose your platform.

Read →

Business & compliance

1 September 2026·5 min read

E-invoicing takes effect today, September 1, 2026 — and 42% of French businesses are not ready

From today, every VAT-liable company in France must be able to receive electronic invoices, and large enterprises and mid-market companies (ETI) must start issuing them. An OpinionWay survey for Tiime published in late August found only 58% of France’s roughly 7 million active companies had chosen an approved platform — and just 46% of sole traders and micro-enterprises expected to be ready on time. What the readiness gap means for your SMB today.

Read →