Responsible, Ethical, Safe and Trustworthy AI

Practical AI governance, risk, compliance and security, written for people who are starting out and cannot find a way in.

Read the blog
Banner image

Responsible, Ethical, Safe and Trustworthy AI

RESTAI is an initiative for awareness, education and support in AI governance, risk, compliance and security.

AI GRCS is a young field, and it shows. The regulations are new, the standards are behind paywalls, the guidance is written for people who already know the vocabulary, and most of what is published online is either vendor marketing or legal commentary written for lawyers. Someone starting out has very little to stand on.

That gap is the reason this site exists.

What you will find here

Field notes, not thought leadership. Write ups of how the EU AI Act, the Cyber Resilience Act, ISO/IEC 42001 and ISO/IEC 27001 actually land when you sit down to implement them, including the parts that are ambiguous or unresolved.

A starting point for newcomers. If you are moving into AI governance from security, from compliance, from engineering or from policy, the first problem is not difficulty. It is not knowing the shape of the map. Posts here try to give you that shape before they give you detail.

Honest uncertainty. Where a requirement is genuinely unsettled, or where practice has not caught up with the text, that gets said plainly rather than smoothed over.

Who it is for

People early in AI GRCS who need a way in. Engineers and founders who have discovered that an AI system they built is now in regulatory scope. Security and compliance practitioners extending into AI. Anyone in the Baltics and the wider EU looking for others working on the same problems.

Where this is going

The blog comes first. Beyond it, the intention is to build something local: meetups and talks in Tallinn and nearby cities, so that people working on AI governance in this region have somewhere to compare notes in person rather than only reading about it.

If that sounds useful, subscribe below or read the posts.

Subscribe

New posts on AI governance, risk, compliance and security, sent when there is something worth sending. No tracking, no sharing your address, and you can unsubscribe from any email.

Email updates are not open yet. Follow the RSS feed to get every post the day it is published, with nothing collected about you.

Latest posts

Start here: what this blog is for

Why AI GRCS is unusually hard to break into, and what this blog will try to do about it.

Read More